Behavioral task
behavioral1
Sample
98945e21d69cd366137a6ab4017ebe78.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
98945e21d69cd366137a6ab4017ebe78.exe
Resource
win10v2004-20231222-en
General
-
Target
98945e21d69cd366137a6ab4017ebe78
-
Size
1.2MB
-
MD5
98945e21d69cd366137a6ab4017ebe78
-
SHA1
3004a2b07767fe5bf96eab6ea074d46eb2c3b3a0
-
SHA256
b7244618238fd9856e3dc19c9febb1b1a2800f1b35df34b34967e8b4e0f9e7aa
-
SHA512
ac3b39b2c48481453e9144175cfcf127e2f4baee1a52328dc83d667319443fe3f6a62bce67327382f69e820fd758003c8c43eee011f6848b2193d4d0ed792e42
-
SSDEEP
24576:CAL/PmU2RSZ1wScnhXVxIk/q+zzmwagUnvaZIVItesauirqbYckx0T:FZQSsSeXVx3/5H8I2HsaTpGT
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 98945e21d69cd366137a6ab4017ebe78 unpack001/out.upx
Files
-
98945e21d69cd366137a6ab4017ebe78.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 84KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 51KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 84KB - Virtual size: 83KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ