Behavioral task
behavioral1
Sample
7eb1d2c65c2a3915e83ca927fa2e8abc.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7eb1d2c65c2a3915e83ca927fa2e8abc.exe
Resource
win10v2004-20231215-en
General
-
Target
7eb1d2c65c2a3915e83ca927fa2e8abc
-
Size
141KB
-
MD5
7eb1d2c65c2a3915e83ca927fa2e8abc
-
SHA1
390812d1dacf58ccf662b1b21df487ba47dc4435
-
SHA256
a8753a114948c79955abe9ff138de8f9bbd8e38e44f6b9bdbc81c4c614380d27
-
SHA512
0cffcf68dda21a6ef0d2952a322894b13072dc664d63a38e66d0f212d4133e8a66ed1bae98faa506d80e4c932ff51f05cb75415021254f74b4063a6d64d24e80
-
SSDEEP
3072:GmmLFZRbl/wA+FDYiib4EJ0MRN2RMbRQ5SenFKYaCdbLIWp:PmLVloAEcN4+0KkudMFKDCdvIs
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 7eb1d2c65c2a3915e83ca927fa2e8abc unpack001/out.upx
Files
-
7eb1d2c65c2a3915e83ca927fa2e8abc.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 139KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 164KB - Virtual size: 161KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 615B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 476B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 448B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ