Behavioral task
behavioral1
Sample
9944426a1ef92311fd17e3bf124fa1f1.exe
Resource
win7-20231129-en
General
-
Target
9944426a1ef92311fd17e3bf124fa1f1
-
Size
35KB
-
MD5
9944426a1ef92311fd17e3bf124fa1f1
-
SHA1
89e7f15d85f0b87287748edf0e6340ffc6f94aeb
-
SHA256
dc3ad53169791f8fa66246c94e398daffb4018a410bc515f8bfaf7e9e822e81e
-
SHA512
f047d9a584197554c8caf24115b3f5dbf2ef1783136cd693a1943bb20b5b7d9d0bc5ca3396742c7a6a3817e1a66d8ad141db2fceaa5af6f5b169415566a37f27
-
SSDEEP
768:ZUmm7iJ8gOv1PcBYbdG/pgcXa2GjIYBM2:ZUB7iJ8tvFFZwQVjO2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 9944426a1ef92311fd17e3bf124fa1f1 unpack001/out.upx
Files
-
9944426a1ef92311fd17e3bf124fa1f1.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 32KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe .wsf windows:4 windows x86 arch:x86 polyglot
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 44KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ