Behavioral task
behavioral1
Sample
9b757ed0f7cdb9cddd939786ac3a07df.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9b757ed0f7cdb9cddd939786ac3a07df.exe
Resource
win10v2004-20231215-en
General
-
Target
9b757ed0f7cdb9cddd939786ac3a07df
-
Size
1.1MB
-
MD5
9b757ed0f7cdb9cddd939786ac3a07df
-
SHA1
d96d93aa1f0159865b5ec1998348242ac4edd1f5
-
SHA256
db9153fe5ed615bab7b86dc52366e116495afb4e78092711eea87b4aa2718a52
-
SHA512
271b4ee66e7816d5e5179facdc3b0a11c049e92a6196ba5f28d1da1fa4d0cee0f703a5f02ed7cbc874287c6253e273d6d1716bc3031211171a09bfb22c8fbeb4
-
SSDEEP
24576:lLZEIN9g8fmff9FjQG3WjGMdU0A7uJUeAaqyQrPHLuabLpbmvJSr589:lLZEq9VmPQGGU0AqJUe0yQrPr7LUYi9
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 9b757ed0f7cdb9cddd939786ac3a07df unpack001/out.upx
Files
-
9b757ed0f7cdb9cddd939786ac3a07df.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 80KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 49KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 87KB - Virtual size: 87KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ