Behavioral task
behavioral1
Sample
VirusShare_5624792e3dc7534be410eada672ed645.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
VirusShare_5624792e3dc7534be410eada672ed645.exe
Resource
win10v2004-20231222-en
General
-
Target
VirusShare_5624792e3dc7534be410eada672ed645
-
Size
132KB
-
MD5
5624792e3dc7534be410eada672ed645
-
SHA1
1a2f5a0d6f821eaccf0d3ba7e7ee7c03ef14f138
-
SHA256
535f5f5034125cd2ef4d71aa27646746d2116d77040b06e29ce79be420668571
-
SHA512
0b409169a718fc2fd4d0db46202db10018bfd9fad8c59fe85f98953e4440ed4611b56fae8289bf6b245fa203127160685267e046b22f76c4b1bfeeacedf8a8a7
-
SSDEEP
3072:ZF+MRUTH1KGM3o4rCrPFwhfpTNanK7+lx3rPStCEgRaaqLxpA3tktT4:ZF+Yg4V3oz2fNanG+nrkeq9a9w
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource VirusShare_5624792e3dc7534be410eada672ed645 unpack001/out.upx
Files
-
VirusShare_5624792e3dc7534be410eada672ed645.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 72KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 89KB - Virtual size: 89KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 85KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ