Behavioral task
behavioral1
Sample
d6eb354087d440515d9cb25e0b1ea2cf999222bf5f34d53fde296336b204157a.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
d6eb354087d440515d9cb25e0b1ea2cf999222bf5f34d53fde296336b204157a.exe
Resource
win10v2004-20231023-en
General
-
Target
d6eb354087d440515d9cb25e0b1ea2cf999222bf5f34d53fde296336b204157a
-
Size
1.1MB
-
MD5
caacb47d266cf051dec025dba7dcf6ef
-
SHA1
09259525d2f76bdbc67abd1ee4b63134867fb2cd
-
SHA256
d6eb354087d440515d9cb25e0b1ea2cf999222bf5f34d53fde296336b204157a
-
SHA512
962d5ce10447f5e39cb7690a50c6f00329ffb9ea7f5831e48b01c9903711c0c6a35dc252b0b0c6923ee11db59ca6cb1ad99805dc618304e1ad130f179a7c5ec5
-
SSDEEP
24576:VuQus/DreIDjOxif8hA3ixL3dci/Lc/AG2VFo81l:ghGXe+OqyRw41fr
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource d6eb354087d440515d9cb25e0b1ea2cf999222bf5f34d53fde296336b204157a unpack001/out.upx
Files
-
d6eb354087d440515d9cb25e0b1ea2cf999222bf5f34d53fde296336b204157a.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.7MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 585KB - Virtual size: 584KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 106KB - Virtual size: 106KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3.0MB - Virtual size: 3.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ