Behavioral task
behavioral1
Sample
42030c2b3222e951f813ca6291c341bc.exe
Resource
win7-20231215-en
General
-
Target
42030c2b3222e951f813ca6291c341bc
-
Size
30KB
-
MD5
42030c2b3222e951f813ca6291c341bc
-
SHA1
cc193787c218db4099e253a2b61728158a0baa74
-
SHA256
71551cfcffc14f96b7e104b699e6bf77b41cfa23e988c290f7f3735823a20438
-
SHA512
8078266bf1e0884a73a9784f9cbb279c4ff4e07e571a60a036dadb89221afd847ee1042d79cbd5cb4e93c2d96dc5851994f5ab6b5629e8d555702d24360417a5
-
SSDEEP
384:bjzH2uoGUKnkr4lBVU9JvjJ5bsnRIda75MYtcVJUe2fMuqcCNcyagg2DILxKDVC/:HCqkr4W9JV6ReaqYtcVBqQ6yMP
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 42030c2b3222e951f813ca6291c341bc unpack001/out.upx
Files
-
42030c2b3222e951f813ca6291c341bc.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 80KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 61KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ