Behavioral task
behavioral1
Sample
7bd00a5352a9bd9908f4609c3ca32c68.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7bd00a5352a9bd9908f4609c3ca32c68.exe
Resource
win10v2004-20231215-en
General
-
Target
7bd00a5352a9bd9908f4609c3ca32c68
-
Size
443KB
-
MD5
7bd00a5352a9bd9908f4609c3ca32c68
-
SHA1
4e23efa35c731570a09f4872a779430eaf9386d4
-
SHA256
e98891f5f17742c9dcbd82f9578fd4ef4f6baa970df72aec85f56540f1d42ce2
-
SHA512
2df97fc904192325a9fc332b8d3e7ada16cb9b3128d1160e5760e87859dbf4b95ce064ccaaa69f3e3f44b793aa2bcaa2de511bb9e0a7ca1c2b28668aa3f10fad
-
SSDEEP
3072:WdRkmaX/kqxr2Hy1vNuqz6DWBAIJhBRn/8Xxvu5frWy28re:G+m3Hy1gqzWWWGn/IMf6yTq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 7bd00a5352a9bd9908f4609c3ca32c68 unpack001/out.upx
Files
-
7bd00a5352a9bd9908f4609c3ca32c68.exe windows:7 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:7 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.khkr Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.xubetnf Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rihtrg Size: 80KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ