Behavioral task
behavioral1
Sample
98001f7ae8ca81c2606b46f162a3e7b2.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
98001f7ae8ca81c2606b46f162a3e7b2.exe
Resource
win10v2004-20231222-en
General
-
Target
98001f7ae8ca81c2606b46f162a3e7b2.exe
-
Size
255KB
-
MD5
98001f7ae8ca81c2606b46f162a3e7b2
-
SHA1
cb46651463f6fb7f9262c6ddcbe0f7f3c99e5611
-
SHA256
f6f467dce53924163e3b019e0cc2ee03b828b0be9e2fa58cda868e7db7007983
-
SHA512
59db3e43da04cdea60494f6f3e3618a77a00c25f3b57b9339623996a3a12fea25f36925d0946059c0bc8637aa303f6f1e5b01aa60bd97fc1b25687ab8299ac90
-
SSDEEP
6144:oBABAdbouCA9dctS6HrFGDrbyyu6vzTr5dNKTToAH6s:omB0OCW1gDpu6nrcVas
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 98001f7ae8ca81c2606b46f162a3e7b2.exe unpack001/out.upx
Files
-
98001f7ae8ca81c2606b46f162a3e7b2.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 488KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 247KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 530KB - Virtual size: 529KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 124KB - Virtual size: 123KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ