Behavioral task
behavioral1
Sample
50310aa8ae5c4ade9934686d9034491326eaa2e237b5bcc88a31aa9dacad80ff.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
50310aa8ae5c4ade9934686d9034491326eaa2e237b5bcc88a31aa9dacad80ff.exe
Resource
win10v2004-20231020-en
General
-
Target
50310aa8ae5c4ade9934686d9034491326eaa2e237b5bcc88a31aa9dacad80ff
-
Size
6.2MB
-
MD5
7b7a00aac4d2a7569f73b22f05f13eb8
-
SHA1
7e158ee4c2d31f03e89e060b858be37bcaebfc42
-
SHA256
50310aa8ae5c4ade9934686d9034491326eaa2e237b5bcc88a31aa9dacad80ff
-
SHA512
d9eb239d2e729ad98188817171c1b81507399ee39e1364fa89b8adf178b52860e884f264ba2c7aaf72712a2e6d8c3c19f084d5870d3086315476f8b7f3271e67
-
SSDEEP
196608:TQPnHg14jc62oO3AbVnGPhXVg9c7CEfAPYM:egZuO3AZGplgG2wJ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 50310aa8ae5c4ade9934686d9034491326eaa2e237b5bcc88a31aa9dacad80ff unpack001/out.upx
Files
-
50310aa8ae5c4ade9934686d9034491326eaa2e237b5bcc88a31aa9dacad80ff.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 12.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 5.9MB - Virtual size: 5.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 335KB - Virtual size: 336KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 3.4MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13.6MB - Virtual size: 13.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 464KB - Virtual size: 799KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 352KB - Virtual size: 349KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ