Behavioral task
behavioral1
Sample
1311097a7731804d3410173511076082.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1311097a7731804d3410173511076082.exe
Resource
win10v2004-20231215-en
General
-
Target
1311097a7731804d3410173511076082
-
Size
43KB
-
MD5
1311097a7731804d3410173511076082
-
SHA1
469b24b04f3f342f2744ac203867072efc32338b
-
SHA256
6b700e227bbadd9b65b55c39bbe6a37e18d4c78ed9a0658addaecad4bab8ac9c
-
SHA512
c25ac0df3ba435d1a7e532a7eb87e814aef8b5c0ebadfabdb132211295b8a7378406727a598326acccbcfa3cd2cc3723c075fb1c2980af336fc26e5c0ab25749
-
SSDEEP
768:2iGyg1OvLYq2f4xU4B+VqvgJMQplEfUa7Do2EcheS9VSDN1expUuGsWkvBTBE:2iGP+j2wxU4BjIMmeM0DoxxXDapUuGsE
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 1311097a7731804d3410173511076082 unpack001/out.upx
Files
-
1311097a7731804d3410173511076082.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 38KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 49KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ