Behavioral task
behavioral1
Sample
b86dee7c3beb1536d5c7d7a3d42f71f4.exe
Resource
win7-20240221-en
General
-
Target
b86dee7c3beb1536d5c7d7a3d42f71f4
-
Size
319KB
-
MD5
b86dee7c3beb1536d5c7d7a3d42f71f4
-
SHA1
8d7f61a0be08ac3ffec78aadaf4816e4b98c7edd
-
SHA256
af0183688431b82308c0e20ef4493b467639dadeda105d7e34ac05f65d3b1956
-
SHA512
db9676bef874bc23ddeac329ff8cb2e06bb31c404a39fe85ab6cd7c13ef1b118f6eb08c8385377f85574630c5e5d0596da542fdc9e439657655382fe37b8a512
-
SSDEEP
6144:A6/V0iJazZiLMsplqSEFSmywxk+7UzC0LWo3kfDxpKqRHhkr:3ZJazZ8PESEImywxk+7UzCup36pB5hkr
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource b86dee7c3beb1536d5c7d7a3d42f71f4 unpack001/out.upx
Files
-
b86dee7c3beb1536d5c7d7a3d42f71f4.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 315KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 98KB - Virtual size: 97KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 287KB - Virtual size: 294KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ