Behavioral task
behavioral1
Sample
29da6389bf270ba986c8272a73b27667.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
29da6389bf270ba986c8272a73b27667.exe
Resource
win10v2004-20231222-en
General
-
Target
29da6389bf270ba986c8272a73b27667
-
Size
5KB
-
MD5
29da6389bf270ba986c8272a73b27667
-
SHA1
30bab6732d79a597d44c62858476848c71c5be1d
-
SHA256
69ebb08a9cfecf8d8f5c6f46a93b92e60da16f0f5b81704abd39a338da4624f1
-
SHA512
cb41643ff340fa1ec842a3a52da76d6e342f0588f1fb50ee942bdddedabd1560a67bf177bcb385a6beafe5374265a8b63b92e457b95567cab73dec8c08ff196d
-
SSDEEP
96:BB2CEyC20F+DL1Xbo4a5DRaimgbPz81bT7HEW1ss:v2qL5o4W9aibqbTIWv
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 29da6389bf270ba986c8272a73b27667 unpack001/out.upx
Files
-
29da6389bf270ba986c8272a73b27667.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 52B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 856B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ