Behavioral task
behavioral1
Sample
b62fdf76d045ae2bd161192cd906ddae.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b62fdf76d045ae2bd161192cd906ddae.exe
Resource
win10v2004-20240226-en
General
-
Target
b62fdf76d045ae2bd161192cd906ddae
-
Size
51KB
-
MD5
b62fdf76d045ae2bd161192cd906ddae
-
SHA1
f59103fdf16b797a5b3dd80fbf7394df9c69b3b9
-
SHA256
ead8285b0353010867d0f742fdbbbcd784be240473c643192a4e3ef9ffa30d40
-
SHA512
51f4b6c3143df28521a724da35131b5b52d6f3122236f000b3cf95ce2d66e683ad46a3c28bbeff31fd8c1e1281c44b18689438a342107fa458b3dd093584c7d2
-
SSDEEP
768:t5d0B5rqjZgj/irpfPOS49nQ1tkB4FQCBgrn61ir3m3DWYpD0cZf7ff/Zo57ark:rC14Zb4pQ/G4FZgzI63SD/Py57ark
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource b62fdf76d045ae2bd161192cd906ddae unpack001/out.upx
Files
-
b62fdf76d045ae2bd161192cd906ddae.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 46KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ