Behavioral task
behavioral1
Sample
2a7a0b4ab068ba4f2933a951a15e4445.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2a7a0b4ab068ba4f2933a951a15e4445.exe
Resource
win10v2004-20231215-en
General
-
Target
2a7a0b4ab068ba4f2933a951a15e4445
-
Size
603KB
-
MD5
2a7a0b4ab068ba4f2933a951a15e4445
-
SHA1
ec20727e94efb7ecb68ea37c01efefd00874c6cb
-
SHA256
b55ea82141d324b06d66f3b43b8bab354581d056265d21866aa7eb6fd03898e4
-
SHA512
0f51347d63b4b0707b2a1a242ede29d95e593505535d8a0e48d44ee2a915ec251f21671cfcad99c1dec2d899fe96a625dd43817e63a942ce5e2b2f311aab4773
-
SSDEEP
12288:h1KNEiY/0DC73y7uV3V/1rD5n9LiZWJs6Yvn2X31EBa28Px+s0sIHErTAhG:gEi2cWiqxV/9Q3v231EwPXfaEHKG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 2a7a0b4ab068ba4f2933a951a15e4445 unpack001/out.upx
Files
-
2a7a0b4ab068ba4f2933a951a15e4445.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ