Behavioral task
behavioral1
Sample
0cf1eedc2cdc36693736d5924cc720ee.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0cf1eedc2cdc36693736d5924cc720ee.exe
Resource
win10v2004-20231215-en
General
-
Target
0cf1eedc2cdc36693736d5924cc720ee
-
Size
8KB
-
MD5
0cf1eedc2cdc36693736d5924cc720ee
-
SHA1
bc585abab6c04e5677ff34d167e7f7e3eb3bb404
-
SHA256
c25429bd7ef6372c2e63a55c02a47da1eb609232d5eaba204c2c5e266f04d968
-
SHA512
a9b9f03128ae7540c3981641d88e8661365fd2f4f8fb0db3d9e0ba5afb8a16a1b15d2a9722bc5e0ccafc44242aebff5d79e20cec5167e107f1b29db38cae2afb
-
SSDEEP
192:s84eD7a6FEQbASWsjdgCDRCV9AA758XXrm:ZFFEQESWsKaRI9r7O6
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 0cf1eedc2cdc36693736d5924cc720ee unpack001/out.upx
Files
-
0cf1eedc2cdc36693736d5924cc720ee.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 292KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 800B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 261KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 696B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 824B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ