Behavioral task
behavioral1
Sample
03a098787aa4266dd03d85152acb7794.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
03a098787aa4266dd03d85152acb7794.exe
Resource
win10v2004-20231215-en
General
-
Target
03a098787aa4266dd03d85152acb7794
-
Size
87KB
-
MD5
03a098787aa4266dd03d85152acb7794
-
SHA1
6351f7f8ca46ef40b79d9dd484b0f0da2b417edb
-
SHA256
dcf2bc78a52efe82e53a546f91b5bdcb17ca392349e9c42ce3be8f17bc2c69f1
-
SHA512
2b06beaa1ce92e61ac6862cd4f75112cb02253f9c9d20dbe0fe28cf834022e0e44c70ce66f00a7c3123d9d142bc6f9f3c750d0357167fc104c6235619b1d71d8
-
SSDEEP
1536:D3RTaC0hg6VvdCcQkL+S6WQ1AlzmoP3YnNssSxHTicfv5xIjxwwh:l6vp+S6WQgCoP4w5Nujx9
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 03a098787aa4266dd03d85152acb7794 unpack001/out.upx
Files
-
03a098787aa4266dd03d85152acb7794.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 92KB - Virtual size: 91KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ