main
Behavioral task
behavioral1
Sample
7dee3a464c3d764687eff922298b6c05.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7dee3a464c3d764687eff922298b6c05.exe
Resource
win10v2004-20231215-en
General
-
Target
7dee3a464c3d764687eff922298b6c05
-
Size
187KB
-
MD5
7dee3a464c3d764687eff922298b6c05
-
SHA1
82b2eb572bbcae49333434c76e76a60097a1395b
-
SHA256
dd9a620b52b3de7a9dd9c461f7c3d3d1cb70db15486f084f44c4ff1b39fe2ab9
-
SHA512
e85ffba2b723239a29466052f937355023a9749dd51bc98ac9ec2ce89516b363d5fb7e2eae6e33ec79a2015c2cb5ba21e586aae7b7aadfa6d0e20caf2266d61a
-
SSDEEP
3072:oXx8kLW+kLeVgfG4j/PTuZLbET2orl611E7FbKBvkjXDBKuxSP1fY3k1Wre:oX2zeVa1j/7uZXql6Ts9KJkjTBUPu3kz
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 7dee3a464c3d764687eff922298b6c05 unpack001/out.upx
Files
-
7dee3a464c3d764687eff922298b6c05.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 52.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 184KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
.text Size: 141KB - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 52.2MB - Virtual size: 52.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ