Behavioral task
behavioral1
Sample
2235a794d715d53a88c7690584f948ea0077e46b70384daea8ed3de751e00679.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
2235a794d715d53a88c7690584f948ea0077e46b70384daea8ed3de751e00679.exe
Resource
win10v2004-20231023-en
General
-
Target
2235a794d715d53a88c7690584f948ea0077e46b70384daea8ed3de751e00679
-
Size
659KB
-
MD5
ebb4ed7dd04a7ce28766206e41fd5ff0
-
SHA1
78beaaabb8fc21ba15db92435ceeec546499534d
-
SHA256
2235a794d715d53a88c7690584f948ea0077e46b70384daea8ed3de751e00679
-
SHA512
0f775b700d157c52582e9ac99948b48674986861d1761627ff7e28b4dc9b42b20238abe77fc16f4849010894c5ce4bdd45f091b1560ed3e3c89b2219e2de6db4
-
SSDEEP
12288:LYFWBdmWuJVYq3T+zRKdbSewFb/ZkPUSt/hExa0kMB:LYUTuDVT0OOb0x/hEM0kW
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 2235a794d715d53a88c7690584f948ea0077e46b70384daea8ed3de751e00679 unpack001/out.upx
Files
-
2235a794d715d53a88c7690584f948ea0077e46b70384daea8ed3de751e00679.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 622KB - Virtual size: 624KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 924KB - Virtual size: 924KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 172KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 860KB - Virtual size: 860KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 855KB - Virtual size: 854KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 188KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE