Behavioral task
behavioral1
Sample
c7725e5c6d403fa893b991ef33c313106bd97ddfcd653681c184898632405dc1.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
c7725e5c6d403fa893b991ef33c313106bd97ddfcd653681c184898632405dc1.exe
Resource
win10v2004-20231215-en
General
-
Target
c7725e5c6d403fa893b991ef33c313106bd97ddfcd653681c184898632405dc1
-
Size
4.5MB
-
MD5
f63e5eb80fcf1b6fa98b1b04a49526d7
-
SHA1
59aa83493b84c0c77d1c9cb820d24d7e3ae28e71
-
SHA256
c7725e5c6d403fa893b991ef33c313106bd97ddfcd653681c184898632405dc1
-
SHA512
294de64a2d5f18aaa9a660c6cd0414690b87a0f5146a3b5af1fdd061e7b6a12552bf5a15ae2c2dc2f9972481d4e88463e55e7477a2e6d9eb338b992f273c9826
-
SSDEEP
98304:2JS0LSwKUEH+/+u2OB3KIo3LaIvHcq0ZS5Luq3BSX5E1XQmlYbvYylGZNb6xzzJ8:GS0sBM4P9uq8gsiAOK6Gl+BT
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource c7725e5c6d403fa893b991ef33c313106bd97ddfcd653681c184898632405dc1 unpack001/out.upx
Files
-
c7725e5c6d403fa893b991ef33c313106bd97ddfcd653681c184898632405dc1.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4.2MB - Virtual size: 4.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 282KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4.5MB - Virtual size: 4.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mtmd Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 284KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mtmd Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ