Behavioral task
behavioral1
Sample
76c11343261d333353d6013ceeac033e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
76c11343261d333353d6013ceeac033e.exe
Resource
win10v2004-20231215-en
General
-
Target
76c11343261d333353d6013ceeac033e
-
Size
444KB
-
MD5
76c11343261d333353d6013ceeac033e
-
SHA1
5d3c0cb97aa979c1d83e016553a02f3ece936043
-
SHA256
56bf92edb6fc21b95bb69b6776e11fceed39a8b788fb4890455536344ebfeb66
-
SHA512
52490bb79ee6ab0c8faf3570e93b3b94b9d62880e6603f42cb89a4de030446cf2994fd292246a1222802dcf677fbc9867f986806e1ccc1b234482a0b444e7265
-
SSDEEP
12288:vpKTOVB5kNLfagIUU8vZ7a81WG2310RenmcRdus:vpKiVB5kNDnr7a8QGg/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 76c11343261d333353d6013ceeac033e unpack001/out.upx
Files
-
76c11343261d333353d6013ceeac033e.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 300KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 437KB - Virtual size: 440KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 333KB - Virtual size: 332KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
MuQMcFKF Size: 170KB - Virtual size: 169KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idat_45 Size: 135KB - Virtual size: 214KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ