Behavioral task
behavioral1
Sample
0215c749400b5b216d5b5a91786822584666154a826f731aeca76b3a5a6fffda.exe
Resource
win7-20240215-en
General
-
Target
0215c749400b5b216d5b5a91786822584666154a826f731aeca76b3a5a6fffda
-
Size
46KB
-
MD5
a5ede31bc465c9ee169fccc0e64d0ca5
-
SHA1
a85e1cb842d325ae3ff3fab0ea32eafd847475ee
-
SHA256
0215c749400b5b216d5b5a91786822584666154a826f731aeca76b3a5a6fffda
-
SHA512
666a5a84be9b0a7aa06e42c53f55d756fead9ef55ce00a50fe518ac4a2528533d6afdfc0cc9c11f3f427818b400f8d2e0b46c8e425fa21e4db6706175ca6f38e
-
SSDEEP
768:yEyjL+YrsRvBu2CDmd1EJrC9JXUqRwvVzWM44yB3EhrX+IMzL0HfYPL/J0B/:ML+Yrc9C6gJmEqRw9zfrypYXvAL0HwTo
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 0215c749400b5b216d5b5a91786822584666154a826f731aeca76b3a5a6fffda unpack001/out.upx
Files
-
0215c749400b5b216d5b5a91786822584666154a826f731aeca76b3a5a6fffda.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 412B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ