Behavioral task
behavioral1
Sample
76f3971934ba1e1cb557b1aeb5359b38.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
76f3971934ba1e1cb557b1aeb5359b38.exe
Resource
win10v2004-20231215-en
General
-
Target
76f3971934ba1e1cb557b1aeb5359b38
-
Size
12KB
-
MD5
76f3971934ba1e1cb557b1aeb5359b38
-
SHA1
995f00f182525562d5d0d0f9e727e0fdf71ae619
-
SHA256
827f272b6e9a1f524c2db2e4304417d99dff220aa82f152842f86124da492878
-
SHA512
c3c5d2eeaece67e99af4b990365bae749db645d8f157aa123fdfbfff3a90dde2ba00ab3a693eb7c1f94aeed735fc478a50c61079494e2a3da4ccb7a2b31e016b
-
SSDEEP
192:8e24kpcVl13tbFWp5skxv8S+Nhp8MJDTOFS+ekIj7L:8F4kcl13tB5MkS+Hp8MJDTOFg
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 76f3971934ba1e1cb557b1aeb5359b38 unpack001/out.upx
Files
-
76f3971934ba1e1cb557b1aeb5359b38.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 532B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ