Behavioral task
behavioral1
Sample
9b0082f7fb7553ac0a802034d161c4c5.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
9b0082f7fb7553ac0a802034d161c4c5.exe
Resource
win10v2004-20231222-en
General
-
Target
9b0082f7fb7553ac0a802034d161c4c5
-
Size
83KB
-
MD5
9b0082f7fb7553ac0a802034d161c4c5
-
SHA1
9bddcc3ff4f33bb3f2ec7f0d2440764e08c7258f
-
SHA256
818c04eafd0cd7ab8cfdfd74efca56725ef5d5a55cd7928299bf468ad6afa444
-
SHA512
a85fc9ec6066121b5b3aefb4f9adae308e0b222ad177a9048d69a760dec8741ddece18985fe4059fd48445085fa3b13c96aadc1add4312456a36f8f36dcc754f
-
SSDEEP
1536:gbmU0nAyeLFJOEtShDJgaO4vzFpGOccRyNt/Ut9VQsiKHt9jCwdjXN3Va:gnhL3NtShDJBOS6OnC61Qsi4jHdjd3Va
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 9b0082f7fb7553ac0a802034d161c4c5 unpack001/out.upx
Files
-
9b0082f7fb7553ac0a802034d161c4c5.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 136KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 75KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 32KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ