Behavioral task
behavioral1
Sample
750b99a6c6e28c229d1f2b5b5ae73005.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
750b99a6c6e28c229d1f2b5b5ae73005.exe
Resource
win10v2004-20231222-en
General
-
Target
750b99a6c6e28c229d1f2b5b5ae73005
-
Size
37KB
-
MD5
750b99a6c6e28c229d1f2b5b5ae73005
-
SHA1
0d93a2a4d0df8e52c9f2e2c28d7f0caba379b560
-
SHA256
5e750fac586cda27ec22494b9af9d8cd3ffbad6eb5457ddcdad34e3db988d7ee
-
SHA512
7de8043cc427532053746db354e4545349786c92e18299a59913283fe92dd55c5785b4ddec22fc3e17d5e60a9a169a481c20dffb88d7a824735453e85c998aaa
-
SSDEEP
384:tX2feVkvXXmVMqrWmx9hlHEYUrvt9kceFdJIZQ4G0+5OIwktBs1Hf4ch9eMLMIgL:l27vHa3rrx3Z7JIZV5kuf4YkKMIR7L0
Malware Config
Signatures
-
Processes:
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Processes:
resource 750b99a6c6e28c229d1f2b5b5ae73005 unpack001/out.upx
Files
-
750b99a6c6e28c229d1f2b5b5ae73005.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 10KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 64KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE