Behavioral task
behavioral1
Sample
66fdd929d3dcc0f278f2e418b15a1f5b.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
66fdd929d3dcc0f278f2e418b15a1f5b.exe
Resource
win10v2004-20231215-en
General
-
Target
66fdd929d3dcc0f278f2e418b15a1f5b
-
Size
86KB
-
MD5
66fdd929d3dcc0f278f2e418b15a1f5b
-
SHA1
5a3e8393b09e2ecf04469076463d81b73dc12d4b
-
SHA256
dbaa22bb1feb74459c1a09b37a635130f7c884e314bbbd995c3476a42f634fd8
-
SHA512
4e96084112691ae1161da9d83d10b592a5650888b1b15d74505858b58dfec44bbc2d3ca8ca3c3a00a09de995c59d97b5c16fa794559aee2754076bef62f58e3d
-
SSDEEP
1536:42lTb6wb9mizg3qtKklJ6RBvqtKklJ6RBp+:42lTveqBloDqBloI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 66fdd929d3dcc0f278f2e418b15a1f5b unpack001/out.upx
Files
-
66fdd929d3dcc0f278f2e418b15a1f5b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 17.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe .js windows:4 windows x86 arch:x86 polyglot
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.bss Size: - Virtual size: 17.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE