Behavioral task
behavioral1
Sample
c00d1aeffb8471e97da5dc9b30f660e1.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c00d1aeffb8471e97da5dc9b30f660e1.exe
Resource
win10v2004-20240226-en
General
-
Target
c00d1aeffb8471e97da5dc9b30f660e1
-
Size
792KB
-
MD5
c00d1aeffb8471e97da5dc9b30f660e1
-
SHA1
90d8e0a6e25b753ad8122ad93679af7be9d41083
-
SHA256
3c309a284fb424c66f6a35e39b3b73e21b23740499e1540d641debce84d21ce2
-
SHA512
1ead7e615a7e1b1e93126d471cecead1d8cfca638e89433343b519dd1190b8525ffac1d9173102e4c1440e7672128a844f6de9d297bf447c38bff0c22e36e879
-
SSDEEP
24576:zYhEFaI3JWOl3d/XGFmXp1ZuJv2+OHdVq2+dx:8HI8Oe0p1cZ27OLx
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource c00d1aeffb8471e97da5dc9b30f660e1 unpack001/out.upx
Files
-
c00d1aeffb8471e97da5dc9b30f660e1.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 356KB - Virtual size: 355KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 72KB - Virtual size: 242KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ