Behavioral task
behavioral1
Sample
50d12ad616b3ef4242215a9515122721.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
50d12ad616b3ef4242215a9515122721.exe
Resource
win10v2004-20231222-en
General
-
Target
50d12ad616b3ef4242215a9515122721
-
Size
209KB
-
MD5
50d12ad616b3ef4242215a9515122721
-
SHA1
cdb1095867d0ff3b73aa6133342161f73fb822fd
-
SHA256
4626e5c44b9a53b95b3bc658b97c4bc13d1789d040e8f628dac0d69c9a5892a3
-
SHA512
7333ff03c133b6094cb5505f844a218a04360fea2c8c8e2f6f2c6e7e98a3ec054fe37e94112c04ce42249b91718142ea0402875e0b0887b1e92bafedf5e544d3
-
SSDEEP
6144:pJ19hZcBv8CmDqIomhYMpgX68H0Y0AEX92ifUewwV2:p1hZcBv8xDqnkzps1H0jPc5I2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 50d12ad616b3ef4242215a9515122721 unpack001/out.upx
Files
-
50d12ad616b3ef4242215a9515122721.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 88KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 206KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 116B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 258KB - Virtual size: 257KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.upx0 Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ