Behavioral task
behavioral1
Sample
461a98833fa5d3d6b7e41bdb798b2aff.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
461a98833fa5d3d6b7e41bdb798b2aff.exe
Resource
win10v2004-20231215-en
General
-
Target
461a98833fa5d3d6b7e41bdb798b2aff
-
Size
11KB
-
MD5
461a98833fa5d3d6b7e41bdb798b2aff
-
SHA1
1171fe14b50cc8b04169a276efa9e777e5ce82b5
-
SHA256
732ebca59d02a9e52534db2656044e95dc8dd3ba11b8c3f27d2f333594b16e24
-
SHA512
d8469b81e7f9f647f4984f15be630143d66375e95188f16aa843124b85401e31d291da8f9497913632ab8b2690f2d16ae9529cb8b9bac447b0e58ff948fa554f
-
SSDEEP
192:LR7VTSWVcaA0wJitZEwtmBHwdL9LFw9tciG9Fu3F0qo2M1QKyAnqiEsg:LRVSWVJAbAt3tuHI5Atci4qXHkg
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 461a98833fa5d3d6b7e41bdb798b2aff unpack001/out.upx
Files
-
461a98833fa5d3d6b7e41bdb798b2aff.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 404B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ