Behavioral task
behavioral1
Sample
9661ddab95a8b6702f1b6689eda0332c.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
9661ddab95a8b6702f1b6689eda0332c.exe
Resource
win10v2004-20231215-en
General
-
Target
9661ddab95a8b6702f1b6689eda0332c
-
Size
677KB
-
MD5
9661ddab95a8b6702f1b6689eda0332c
-
SHA1
5ef81316057a4620d53c2b015c32a46d2eb5986d
-
SHA256
09b9523e836f68dfb55a4421b364ddb8ef9f1567ba9c4ada45effba953d6756d
-
SHA512
c26b54a05c92b2431205344e3725dea5e075c861ed72de84af8fe04b3040fcaa6b6d3e8c3d800d4be224862f1bf0baf68bb99c04633611939d7fda307e250899
-
SSDEEP
12288:f2Pn6uN/0bdeuxiCrwKwxJO/2KcKXXgBT4/ahKVUYAYS3YPcu2ct3wt+3:ePPNsBTiCrwvxI/2KRXwSShKVnAYeI13
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 9661ddab95a8b6702f1b6689eda0332c unpack001/out.upx
Files
-
9661ddab95a8b6702f1b6689eda0332c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 84KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ