Static task
static1
Behavioral task
behavioral1
Sample
PeCompact 2.98.4/UnPackMe_PeCompact 2.98.4.a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
PeCompact 2.98.4/UnPackMe_PeCompact 2.98.4.a.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
PeCompact 2.98.4/UnPackMe_PeCompact 2.98.4.b.exe
Resource
win7-20231129-en
Behavioral task
behavioral4
Sample
PeCompact 2.98.4/UnPackMe_PeCompact 2.98.4.b.exe
Resource
win10v2004-20231222-en
General
-
Target
5432dd7c8df927adc0f01951015e2bb6
-
Size
329KB
-
MD5
5432dd7c8df927adc0f01951015e2bb6
-
SHA1
b6d951cd08b0cf7154eac11c3fb670f054fe6816
-
SHA256
27af5d5e9f074a5c5f67f92e21830abad46f02d3cd9aadfb87542cf7c15169fb
-
SHA512
d812351b9e9572ce95d20ea2f4075298aa3864dc7d0e5f76c15ebd3d93291b506255815ae6bdc81625778f6c105c43ae5aa1704e9c4c3a35497131a2c9085ac8
-
SSDEEP
6144:O7Q6+FL7l1n+C8PKINz6+L/Zyhui1sB9ueXJcNf8UUVwN/tzD5t5mpQoM:aQ6+NR1Fk6H11+9ueXJcN0U3tFtIHM
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/PeCompact 2.98.4/UnPackMe_PeCompact 2.98.4.a.exe unpack001/PeCompact 2.98.4/UnPackMe_PeCompact 2.98.4.b.exe
Files
-
5432dd7c8df927adc0f01951015e2bb6.rar
-
PeCompact 2.98.4/UnPackMe_PeCompact 2.98.4.a.exe.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 152KB - Virtual size: 424KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
PeCompact 2.98.4/UnPackMe_PeCompact 2.98.4.b.exe.exe windows:4 windows x86 arch:x86
9a9430fd50c973a696f7cf43618a2d22
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
winmm
PlaySoundA
user32
ReleaseCapture
gdi32
GetClipBox
comdlg32
CommDlgExtendedError
winspool.drv
EndDocPrinter
advapi32
RegCloseKey
shell32
DragQueryFileA
comctl32
ord17
oledlg
ord8
ole32
CoTaskMemAlloc
oleaut32
VariantClear
Sections
.text Size: 152KB - Virtual size: 424KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE