Behavioral task
behavioral1
Sample
9dae31827ebc519d4d305c9ee5ae54846779183c9d2ff58aac64bcfbff1dee9c.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
9dae31827ebc519d4d305c9ee5ae54846779183c9d2ff58aac64bcfbff1dee9c.exe
Resource
win10v2004-20231215-en
General
-
Target
9dae31827ebc519d4d305c9ee5ae54846779183c9d2ff58aac64bcfbff1dee9c
-
Size
274KB
-
MD5
3bb6803556e4bf31d7787af816da6d66
-
SHA1
61a747a29deecfd2f49274b317d6dbe06723b1ed
-
SHA256
9dae31827ebc519d4d305c9ee5ae54846779183c9d2ff58aac64bcfbff1dee9c
-
SHA512
66cd9e031fd0e3039182dba845ed1fb32ead7b3342f873f45c069431a6c8ea3c15c045ea0d42f0abf272c5b15055114cf847e5ca08abfcb04aadc3d1f0eff067
-
SSDEEP
6144:JbTirrfykiiUjh6QH/cEOkCybEaQRXr9HNdvOa:JPcrfR6ZnOkx2LIa
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 9dae31827ebc519d4d305c9ee5ae54846779183c9d2ff58aac64bcfbff1dee9c unpack001/out.upx
Files
-
9dae31827ebc519d4d305c9ee5ae54846779183c9d2ff58aac64bcfbff1dee9c.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 280KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 140KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 133KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 157KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 61KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 25KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ