Behavioral task
behavioral1
Sample
5531d453a2e866528614ff48b7948fb9.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5531d453a2e866528614ff48b7948fb9.exe
Resource
win10v2004-20231222-en
General
-
Target
5531d453a2e866528614ff48b7948fb9
-
Size
5.5MB
-
MD5
5531d453a2e866528614ff48b7948fb9
-
SHA1
ccc1c782ac74447406ce1dcd1eb3859ce2c75a91
-
SHA256
523d532af3a4593ebf185dd4ab877611c9864f976e6b82fc258a019419df3a6f
-
SHA512
8862ed6d68bf5cf1c887086e9d0e1d79029f57a3865c27bf2df8b8810355079025ed042b802bf49e3981117db595bbf5f30c1a99693812728b862eb94f02cd21
-
SSDEEP
98304:6wI89wPuJoy9yMw2PIj4p1i6zsomwmLnivshldmj9gKfqRUjIII9l1JMQ0c/Q5+4:u8oEt170wGndhxKfqKjlIVGHc/Q51
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 5531d453a2e866528614ff48b7948fb9 unpack001/out.upx
Files
-
5531d453a2e866528614ff48b7948fb9.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 498KB - Virtual size: 500KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 920KB - Virtual size: 916KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 156KB - Virtual size: 154KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 120KB - Virtual size: 450KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ