Behavioral task
behavioral1
Sample
1691873323e978f97662266b49a6af11.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1691873323e978f97662266b49a6af11.exe
Resource
win10v2004-20231215-en
General
-
Target
1691873323e978f97662266b49a6af11
-
Size
7KB
-
MD5
1691873323e978f97662266b49a6af11
-
SHA1
24dfe50ef487f38f4b39d6a5af9baec96e512489
-
SHA256
c94c06b5ed2a6f598a7ace64a4a7309626e00d28dddfaa303f27e9495131b433
-
SHA512
d1f35c45e9cbfc1f96e7c8f15d3459203ffb069f8efc32b4693a92e497800721192ec04525a8447fc4434a9a0755a1dd82c94b0b8d2056ec49ba8158ab0b86d4
-
SSDEEP
96:Owjt7JWyX3C/N4aGuzeykvRbaZiLa+e1ncO/G7QQIM/vOci2yaqv0Qs:OwXWx/NL9CV0X4QzivOci2yaJ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 1691873323e978f97662266b49a6af11 unpack001/out.upx
Files
-
1691873323e978f97662266b49a6af11.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ