Behavioral task
behavioral1
Sample
bf9a3adfb6bb2e9e6f90eab707295d6d.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
bf9a3adfb6bb2e9e6f90eab707295d6d.exe
Resource
win10v2004-20240226-en
General
-
Target
bf9a3adfb6bb2e9e6f90eab707295d6d
-
Size
117KB
-
MD5
bf9a3adfb6bb2e9e6f90eab707295d6d
-
SHA1
7199eaa545e7da457d48e3ce9f7af879e3d0efc5
-
SHA256
b9e85610aa10fb4a9d45cabd9b295206fa3faa9b358484db65bc01aa947ef8db
-
SHA512
29e25972d73280f56b9e42622d5ce6b162c210bffd0d2b0852e7521dd0bc9e9e8f17e663629e85e1b8a751285d0e8e57ac8f81cced9de6b4dc7a794d23142b9f
-
SSDEEP
1536:el+DkP2syFQMm9DbWMyYnFuI5sQXejO+WnA1xpgEeeZ4gfNwVazPRqiZ3S30IlC:el+DkPxyCMmVqREFH5s1O+dFFNwVyQc
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource bf9a3adfb6bb2e9e6f90eab707295d6d unpack001/out.upx
Files
-
bf9a3adfb6bb2e9e6f90eab707295d6d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 69KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 47KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 120KB - Virtual size: 119KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 13B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 300B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ