Behavioral task
behavioral1
Sample
8906d6ad38ea9367e9228253f00ef1ed.exe
Resource
win7-20231129-en
General
-
Target
8906d6ad38ea9367e9228253f00ef1ed
-
Size
725KB
-
MD5
8906d6ad38ea9367e9228253f00ef1ed
-
SHA1
d93ee13583a0b2d0a02eda62b62bb0e88110ca9b
-
SHA256
c0ddc9469af75067c5fd02eb71a6fc3e8c3723afeb6271f6c1408a8a8437ce41
-
SHA512
e8e3669154974b44b457e58fec82e72300f69675ee6c6d46933ff99034ce9bf762623f4f6759996c733b5bd9e56446e1b14475cb787a4afc70734368c6b8f382
-
SSDEEP
12288:nsaY8rHERxdkKY3PUb4q+h9KYvHUIVFz6tj4DIb3NwcJnoGJex9bAiDddFqDy6/d:B/rkym439xvFVoVWUoGJejbVBdFK1tD
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 8906d6ad38ea9367e9228253f00ef1ed unpack001/out.upx
Files
-
8906d6ad38ea9367e9228253f00ef1ed.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ