Behavioral task
behavioral1
Sample
24edd9124628cf5ff9c7210e2c25beef.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
24edd9124628cf5ff9c7210e2c25beef.exe
Resource
win10v2004-20231215-en
General
-
Target
24edd9124628cf5ff9c7210e2c25beef
-
Size
3.6MB
-
MD5
24edd9124628cf5ff9c7210e2c25beef
-
SHA1
05baa3c4b99bc8f3cbb7696872c5562c7de3d76b
-
SHA256
45c3350c2b8d4d949f85eb2a2a47bc2eac38ade8f9a58149a92cb090276970ae
-
SHA512
245e8e740dfb1ee3184755a3fcd5fd9f2dd891fe0a1032ab1660e40c5397e7dec218df53070d902c3b82a4ad596f1b929b29fcbbc5813cdd1c25fb9487e36465
-
SSDEEP
98304:hDiMiOYYyejnLQuUx29LoSj7h9jrjFALPNiUoGE:hiOYYFLLQ526Sj7hNra7tHE
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 24edd9124628cf5ff9c7210e2c25beef unpack001/out.upx
Files
-
24edd9124628cf5ff9c7210e2c25beef.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 88KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 73KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ