Behavioral task
behavioral1
Sample
feedaf9b966c3ee4bed75ea4dcfdb629.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
feedaf9b966c3ee4bed75ea4dcfdb629.exe
Resource
win10v2004-20231215-en
General
-
Target
feedaf9b966c3ee4bed75ea4dcfdb629
-
Size
329KB
-
MD5
feedaf9b966c3ee4bed75ea4dcfdb629
-
SHA1
c431053a5cca2ae08e10541b58ad2dc80d22e8dc
-
SHA256
5fe6773f71420affa5ad91263fbb601dbd2f4535980dae658b5e65e930092bab
-
SHA512
68bdcc31c4475315ddf5da823cbfb12ec4c5e45497eb0b985e00b14b6f242b22d71d8a2ef1ff4320d653b53bca34cf668833c2cb6465405e60a523b1ca1dd692
-
SSDEEP
6144:6SQfhYCjILkOUvJyWRJFLnWOuqWGK7HneaUhKl24vCHD98YVyU7FwmjG:XQfqwuUvJyWRf7WZLoh/1j+YVFFwo
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource feedaf9b966c3ee4bed75ea4dcfdb629 unpack001/out.upx
Files
-
feedaf9b966c3ee4bed75ea4dcfdb629.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 624KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 250KB - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 412KB - Virtual size: 409KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 300KB - Virtual size: 296KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ