Behavioral task
behavioral1
Sample
00269d56247d1b0c43067f7f548576c6.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
00269d56247d1b0c43067f7f548576c6.exe
Resource
win10v2004-20231215-en
General
-
Target
00269d56247d1b0c43067f7f548576c6
-
Size
45KB
-
MD5
00269d56247d1b0c43067f7f548576c6
-
SHA1
215f466c8e8ba6f5d7f99c16189f8e71b73e448d
-
SHA256
9c61dd932545ba37049f3ab4e8f1c2040f4b751ea56bab1ace7ce95873929df5
-
SHA512
c505cda37b0ab4890bbdcaee084855be0b4be6940f4111a1c31f20d0a3cdbe01d3a850e55c4c9cceeafc50a3c2342ab6d796a297e5db16d0e414eb2a6ecc6df5
-
SSDEEP
768:/nxSPaAGl5OePDiwolz0ACso7Rr0TKkfBQrYkuFY3VABGE7:/nxQaAGl5Oui5lSsydrYk8IAY
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 00269d56247d1b0c43067f7f548576c6 unpack001/out.upx
Files
-
00269d56247d1b0c43067f7f548576c6.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 96KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ