Behavioral task
behavioral1
Sample
9bf0651ac40d6e5ffeca81c5dae295fc.exe
Resource
win7-20231215-en
General
-
Target
9bf0651ac40d6e5ffeca81c5dae295fc
-
Size
34KB
-
MD5
9bf0651ac40d6e5ffeca81c5dae295fc
-
SHA1
50732f60f9c230b2595e1a359353f54c2350e787
-
SHA256
b5407cb2c29e1e0da03238866178ba3d4ba816654200af0017ee362b84f44493
-
SHA512
daa417eb4b0fdfbe376a8e1317b03d363187ef91b7287532f4ba9e973d85008ad8022185687f1c1a4442385c8b12527e52c21f64a7ceec54e11113182a8fed77
-
SSDEEP
768:tCEFwDBQPHhxrzOcCxY0+H29gG65uWu5OiPvCEmI3x/:wEOGPPrKOC9MqOzEmW/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 9bf0651ac40d6e5ffeca81c5dae295fc unpack001/out.upx
Files
-
9bf0651ac40d6e5ffeca81c5dae295fc.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe .wsf windows:4 windows x86 arch:x86 polyglot
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 40KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ