Behavioral task
behavioral1
Sample
441b4f87c32a2b75a492138114ad3a5a14a0289e0f799156f54dfc2a963dbf60.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
441b4f87c32a2b75a492138114ad3a5a14a0289e0f799156f54dfc2a963dbf60.exe
Resource
win10v2004-20231130-en
General
-
Target
441b4f87c32a2b75a492138114ad3a5a14a0289e0f799156f54dfc2a963dbf60
-
Size
223KB
-
MD5
fa490ec9072317b7db12a0003ca60a2f
-
SHA1
c922c2d66393a5a6daedb55173b15507e1640963
-
SHA256
441b4f87c32a2b75a492138114ad3a5a14a0289e0f799156f54dfc2a963dbf60
-
SHA512
3b3b0f4d5541feb32569b996dcac208d6beabbefb1dbf03b7598186c867a07fab3a748d276e4eb2f5932b0c4fe92b3747518b1f8ae4fe8ae4d28e9eec166c565
-
SSDEEP
3072:dZ7wXfSRZ0ON/EwW66wN94xu4CkAZJM2k5D66L+NfGbVON2Nqi/6gS5UoWXHz72n:XwPSUONLNsuWA7koN+boRi9S6oiz72D
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 441b4f87c32a2b75a492138114ad3a5a14a0289e0f799156f54dfc2a963dbf60 unpack001/out.upx
Files
-
441b4f87c32a2b75a492138114ad3a5a14a0289e0f799156f54dfc2a963dbf60.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 208KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 220KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 166KB - Virtual size: 166KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 63KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 25KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ