Behavioral task
behavioral1
Sample
bb462beb8eb803063a240a4d0f38d555.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
bb462beb8eb803063a240a4d0f38d555.exe
Resource
win10v2004-20240226-en
General
-
Target
bb462beb8eb803063a240a4d0f38d555
-
Size
385KB
-
MD5
bb462beb8eb803063a240a4d0f38d555
-
SHA1
3ccc44e77fa9671c2f34f5ae14fc7ae531674a6d
-
SHA256
2f36d0661144091c615298cd8a4ecbac4d5aec09b55571ae8395e1d3a1cb0566
-
SHA512
3dea7b288c1180eedb3e18e2ad8cb34332b8a98114f301d9313c1a662b6de3dab8afdae54c23a3487b71ca85b5c1fde1017c5024226286412cdb200bd08be6dc
-
SSDEEP
12288:DrvpQA99wXTTrqylvzGgsSig20w4TrD2yX/mQGh:Dr2A9QTqgzLT7DPm/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource bb462beb8eb803063a240a4d0f38d555 unpack001/out.upx
Files
-
bb462beb8eb803063a240a4d0f38d555.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 379KB - Virtual size: 380KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 221KB - Virtual size: 220KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 240KB - Virtual size: 239KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ