Behavioral task
behavioral1
Sample
190132b80ad86d986f718f6849a199dc.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
190132b80ad86d986f718f6849a199dc.exe
Resource
win10v2004-20231215-en
General
-
Target
190132b80ad86d986f718f6849a199dc
-
Size
35KB
-
MD5
190132b80ad86d986f718f6849a199dc
-
SHA1
6aa1ac05e2a7a049db2d40bb4e7a2dfe8ec8df56
-
SHA256
cbc908b6e1b46e823fa6ddd780693fe23c60cc936ebdb152da3fccd59dbae939
-
SHA512
09b30b5bfa6b88a01f3b59008a43eaa3946134f55cdf7b4f2703af8b7812163c38c0810d501fb7fc2300f4bad61917187416400998302967d35eb32457048785
-
SSDEEP
768:zZpM7+U/eyCKavf8JUNgym5D5Jtds+lQp0797eMbAnodVuZyqa:zjm7EKatNpuLc+Sp0B6oAnGQAqa
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 190132b80ad86d986f718f6849a199dc unpack001/out.upx
Files
-
190132b80ad86d986f718f6849a199dc.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 84KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 32KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.bss Size: - Virtual size: 96B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 88KB - Virtual size: 87KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ