Behavioral task
behavioral1
Sample
198a5fc0d416f31a619c766b24e5ba14063bf6ec67ffd4b953e8933733c84149.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
198a5fc0d416f31a619c766b24e5ba14063bf6ec67ffd4b953e8933733c84149.exe
Resource
win10v2004-20231130-en
General
-
Target
198a5fc0d416f31a619c766b24e5ba14063bf6ec67ffd4b953e8933733c84149
-
Size
877KB
-
MD5
e2e897e079d22903d139b0159ac85f1b
-
SHA1
7c9d353433032590b04f53248c413dfd1d8a7f09
-
SHA256
198a5fc0d416f31a619c766b24e5ba14063bf6ec67ffd4b953e8933733c84149
-
SHA512
f562ecbf58229e5a0b8dd3116ed6bc6b580a8df5a5f7db4e55f77ff375a2cc28b7954b1daf7167ba825f1e97d51c674b1cc8401e85ba9a1479d705d1eccef599
-
SSDEEP
24576:SHZOE9Y7kffzTOYLT7/3MyuyIS3HVtt1snP8s2SPCBI:2Hi7y3dLT70y/IaHVtt1EUbSe
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 198a5fc0d416f31a619c766b24e5ba14063bf6ec67ffd4b953e8933733c84149 unpack001/out.upx
Files
-
198a5fc0d416f31a619c766b24e5ba14063bf6ec67ffd4b953e8933733c84149.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 854KB - Virtual size: 856KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 900KB - Virtual size: 897KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 484KB - Virtual size: 480KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 164KB - Virtual size: 496KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ