Behavioral task
behavioral1
Sample
9795e15a60f9926646534a9e822316dc.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9795e15a60f9926646534a9e822316dc.exe
Resource
win10v2004-20231215-en
General
-
Target
9795e15a60f9926646534a9e822316dc
-
Size
195KB
-
MD5
9795e15a60f9926646534a9e822316dc
-
SHA1
932d6dfeb4f7a9d524209c923b7583421e113bfe
-
SHA256
c9ef28b5d9d81cb5be2831a7ae1cf56668f766d9545a1e17dc32c83b3fad88df
-
SHA512
9ec6ec9eb8a213d50aeeef81ade65d381bbaf4545d31d38df6da6de9ff899498b2aad57bbbde4c34c48010708cbecae45bda1c67fdf8bb235ead375bc035bdfa
-
SSDEEP
1536:txft5mxft5UkU3EKHae/bxft5mxft5Sxft5mxft5UkU3EKHae/l:v15S15UbEDQ15S15G15S15UbED2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 9795e15a60f9926646534a9e822316dc unpack001/out.upx
Files
-
9795e15a60f9926646534a9e822316dc.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 128B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 752B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 496B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE