Behavioral task
behavioral1
Sample
43b96686aee428d237fc1e020a944aab.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
43b96686aee428d237fc1e020a944aab.exe
Resource
win10v2004-20231215-en
General
-
Target
43b96686aee428d237fc1e020a944aab
-
Size
295KB
-
MD5
43b96686aee428d237fc1e020a944aab
-
SHA1
e2b7a2c05cef4bc6d4d13d00cd6ce666135e0226
-
SHA256
c6e9f71987f8c9c6ff453dbace3698296f5d3f2ee313ba6ef8a1eef8f9f68b66
-
SHA512
063ed79a4f48f237280e6d43e3f0268042e6bc10a9cff5244229301ff14884ca9fc9a16983ab6265af76c66e37830af5a7e8c35a9f10b4c9cf96e18a8b237bd2
-
SSDEEP
6144:fXQa2ANSL6xzr1/FgEN7/o3HjBfIP8k8xP8kFPnEctcEnPFk8eVhqn68EJJ:/wANSL6Bi9fgu5UJ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 43b96686aee428d237fc1e020a944aab unpack001/out.upx
Files
-
43b96686aee428d237fc1e020a944aab.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ