Behavioral task
behavioral1
Sample
1cba4fb41e42b344f5ce2ee38d71f797.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1cba4fb41e42b344f5ce2ee38d71f797.exe
Resource
win10v2004-20231215-en
General
-
Target
1cba4fb41e42b344f5ce2ee38d71f797
-
Size
2.0MB
-
MD5
1cba4fb41e42b344f5ce2ee38d71f797
-
SHA1
65e57172712f2a4882f79daf29376310712766f3
-
SHA256
e39320b5e894d4423e04721d539ef34395d17620788ea6dc47bcca64f1329568
-
SHA512
16f68ac156d525622aa15495b334833e3f038be3f71a3f4748e35a5b3143f914bce0f4b22884306b9c2965063bb582a8adc8bd21ba5d12e48cb04dd4e6a81011
-
SSDEEP
49152:AHmJU48j2xjlHlc9pUpZE9+JvFXm1dkdXAgcxVyOiQ0:AGJU4GUxlc98ddmvsBuyOiF
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 1cba4fb41e42b344f5ce2ee38d71f797 unpack001/out.upx
Files
-
1cba4fb41e42b344f5ce2ee38d71f797.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 70KB - Virtual size: 70KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ