Behavioral task
behavioral1
Sample
19bdf85c81c6c78e573b4415ca04ac9d.exe
Resource
win7-20231201-en
Behavioral task
behavioral2
Sample
19bdf85c81c6c78e573b4415ca04ac9d.exe
Resource
win10v2004-20231201-en
General
-
Target
19bdf85c81c6c78e573b4415ca04ac9d
-
Size
95KB
-
MD5
19bdf85c81c6c78e573b4415ca04ac9d
-
SHA1
e7af0c2ecebca06fe6cfb5df92d1ff5dcb18a4ba
-
SHA256
7f10bf76175593cdb57bea1d96a27537149cc5e30879f07a5fc9406172325db0
-
SHA512
aa816573f7ea6e9cee1d846900098ac192da101aba8ea6907bf43fe451d80ec238e7916da29d302f7f49c94a2f04ffa2ba1644ca8484b3af6572b127655c3caf
-
SSDEEP
1536:egKcR4mjD9r82MH3saNYE5xQh/WJCavJyvAIgasZnAB1ldrXC3I:5KcWmjRrzu3AE5ahIcAlaKWJC3I
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 19bdf85c81c6c78e573b4415ca04ac9d unpack001/out.upx
Files
-
19bdf85c81c6c78e573b4415ca04ac9d.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ