Behavioral task
behavioral1
Sample
47239c4a3082d4a1657782e134cb0c0e.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
47239c4a3082d4a1657782e134cb0c0e.exe
Resource
win10v2004-20231215-en
General
-
Target
47239c4a3082d4a1657782e134cb0c0e
-
Size
351KB
-
MD5
47239c4a3082d4a1657782e134cb0c0e
-
SHA1
fe18ec6e8dffc045ba51cc675f851c972e928bf6
-
SHA256
a217c0d48626e84c649d006fd9fb615c6004061980379bfde11de02f54fdb23e
-
SHA512
2c8b8c68b23688c85c610ed487dc62991c5752ccab7eae5f3b7837ec0d3f6deb26b050c0c70f4aba430c05c1d23cafcce00036af514678997040a52ae8a5e611
-
SSDEEP
6144:YcM5DWnN6aAW/2kXz20ckY+NIMZKHuWXC0Qgihp:DM5DSN6aAH0XNp7gGp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 47239c4a3082d4a1657782e134cb0c0e unpack001/out.upx
Files
-
47239c4a3082d4a1657782e134cb0c0e.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 424KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 193KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 157KB - Virtual size: 220KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 350KB - Virtual size: 350KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 89KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ