Behavioral task
behavioral1
Sample
79216cd3ed9ee307124cf27b85c86c1b.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
79216cd3ed9ee307124cf27b85c86c1b.exe
Resource
win10v2004-20231215-en
General
-
Target
79216cd3ed9ee307124cf27b85c86c1b
-
Size
154KB
-
MD5
79216cd3ed9ee307124cf27b85c86c1b
-
SHA1
447d33c2ab5bab5380c19110100e56f12c220728
-
SHA256
20dc5934806b12c8b121d011c91ced9946ab13f5b2cfe4fa5c80bd7b3e3a09c9
-
SHA512
ec0010fba04eb55931930667cd267510b522307298d943ea3dbd6a055ec6c00168084d792cce9cef2e1a13377389bde205b418df1f405c7e1c3bc604a2c85ccc
-
SSDEEP
3072:SwV4OgSzBmh04eZFkz3Rr0gwGj9Tf8iynK6VD+opU0D:SMzzILGFkzhr0pGj9ozK6Vi+d
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 79216cd3ed9ee307124cf27b85c86c1b unpack001/out.upx
Files
-
79216cd3ed9ee307124cf27b85c86c1b.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 232KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 73KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 115KB - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 343B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ