Behavioral task
behavioral1
Sample
133c7e4509d5ecc8f9f8854887c18ea8.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
133c7e4509d5ecc8f9f8854887c18ea8.exe
Resource
win10v2004-20231215-en
General
-
Target
133c7e4509d5ecc8f9f8854887c18ea8
-
Size
59KB
-
MD5
133c7e4509d5ecc8f9f8854887c18ea8
-
SHA1
b472b8fabfc627be6d3ac710dd908ea5e4bb7c2a
-
SHA256
f7b75e2ad0540551e51eb416ca90c4900566767af3d4560488c728bfe02eba37
-
SHA512
e43f6a39c743b8a98d8ee80c99b22eda50ee09b3b254035db3eb432c75d7db1d4129f62c9fd586e513a2b898ce137e2b4e7ef9b07d15551fa566cfb27d3b9874
-
SSDEEP
1536:egKcR4mjD9r82mOzlP1sfrGPVkTOhy9nz89+:5KcWmjRrzmOzlWfOVkTOOA9+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 133c7e4509d5ecc8f9f8854887c18ea8 unpack001/out.upx
Files
-
133c7e4509d5ecc8f9f8854887c18ea8.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ