Behavioral task
behavioral1
Sample
1438d50c18d5fc9458906d1631aff4f7.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1438d50c18d5fc9458906d1631aff4f7.exe
Resource
win10v2004-20231215-en
General
-
Target
1438d50c18d5fc9458906d1631aff4f7
-
Size
219KB
-
MD5
1438d50c18d5fc9458906d1631aff4f7
-
SHA1
ac50327a6396dd48e5715571aa535d78da7b5392
-
SHA256
82948d70e53063a0248e778b6eb38a12c913d1adc5688accb23f347caa2133c8
-
SHA512
811ac7e7acdee9b29bd995bbedad200464a6c1392f62ff240987005b57149af7bf3243052a880d594aac374f917167f53a49ccac0bff2abefa752fb2a47f5731
-
SSDEEP
3072:7LQxnaO2Pmk6qmy9JJyTyFT/jD68YJ0I3s1xVGDZkz2jx1CGXbq6mr2UYa5moS9T:7k8/my9Zi1SpqQ2jx1XLqZrYQo8CAWO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 1438d50c18d5fc9458906d1631aff4f7 unpack001/out.upx
Files
-
1438d50c18d5fc9458906d1631aff4f7.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 236KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 146KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 204KB - Virtual size: 204KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 85KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ