Behavioral task
behavioral1
Sample
5646abd186a4c1f0f66af139990932c3.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
5646abd186a4c1f0f66af139990932c3.exe
Resource
win10v2004-20231215-en
General
-
Target
5646abd186a4c1f0f66af139990932c3
-
Size
27KB
-
MD5
5646abd186a4c1f0f66af139990932c3
-
SHA1
b9524e32fec1ed10d98a8833acb27db4987f302c
-
SHA256
32c41e97e00976e3d67d5ff2d895aa465a17e3119999fac14e63248324444b1a
-
SHA512
66355ae913c5054834a651cfdebee55cec919ca1d419a59551005939afcc2d0b51a38d82832e951751dff54e086e35b9ee8a8b05774f46e132e82b36c57e02f4
-
SSDEEP
768:FwZip9lypQxP3wnaJNh1vny4vGR1bVBNEv1QoF:Fl9EQNba4+R19a1Qo
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 5646abd186a4c1f0f66af139990932c3 unpack001/out.upx
Files
-
5646abd186a4c1f0f66af139990932c3.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 59KB - Virtual size: 58KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ