Behavioral task
behavioral1
Sample
0b37ce112a61db00733820f123886be04f7e386124caa0467740f4444ce5277f.exe
Resource
win7-20231215-en
General
-
Target
0b37ce112a61db00733820f123886be04f7e386124caa0467740f4444ce5277f
-
Size
2.6MB
-
MD5
c7a6ac764464dd405bb55018b21b913b
-
SHA1
d5d3de65fa7ac6211c03e51864ef647e4106de58
-
SHA256
0b37ce112a61db00733820f123886be04f7e386124caa0467740f4444ce5277f
-
SHA512
983e48d4abe3f285f66b1c0b4086ba065f4348df84f92ebeec8ed5044f7ec014601eeb4599da0dcfc305eb829f95f8847480796e213f596e71359e4a77365fdd
-
SSDEEP
49152:GmMivbLZVyR7JSRS1SUliSC5N/piW5AJs5fH5d7rDPjtmMSqgMWRth1ST6xh7a1i:6iWRNSM1S+iT5NRiW5ksVH5d7EMSq0LQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 0b37ce112a61db00733820f123886be04f7e386124caa0467740f4444ce5277f unpack001/out.upx
Files
-
0b37ce112a61db00733820f123886be04f7e386124caa0467740f4444ce5277f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 323KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 980KB - Virtual size: 978KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 972KB - Virtual size: 969KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 124KB - Virtual size: 325KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmps0 Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 328KB - Virtual size: 326KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ