Behavioral task
behavioral1
Sample
75860fe58264dda978fb1cb2ebbb8033.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
75860fe58264dda978fb1cb2ebbb8033.exe
Resource
win10v2004-20231222-en
General
-
Target
75860fe58264dda978fb1cb2ebbb8033
-
Size
1.7MB
-
MD5
75860fe58264dda978fb1cb2ebbb8033
-
SHA1
4245a612d24b6b502005dd7e46779a63352e2872
-
SHA256
d75cde2974ab9d3bbf701fc1e811cb948e0e8a09c58dfd407783a0cc7c698c42
-
SHA512
b9098af7bf2c09bc296049c8c1d43c99defe4642cc7bd9ff9b6413d8d208b68e8901e4e6d53e47be383a7c4b99a6b65be68bb936131dc5e7d03af562d547ee13
-
SSDEEP
192:E/55gzI3BWJJl3SzbwTS+9DXIAvxhYH5mJET4O4GPM8+TLjhOZb9heeOnBrTy:+5gzI8lCXQrhJJhYHYJET448jO9ypy
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 75860fe58264dda978fb1cb2ebbb8033 unpack001/out.upx
Files
-
75860fe58264dda978fb1cb2ebbb8033.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 780B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ