Behavioral task
behavioral1
Sample
c20f4277d8e8f02c58c6db856c8dc4a5.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
c20f4277d8e8f02c58c6db856c8dc4a5.exe
Resource
win10v2004-20240226-en
General
-
Target
c20f4277d8e8f02c58c6db856c8dc4a5
-
Size
319KB
-
MD5
c20f4277d8e8f02c58c6db856c8dc4a5
-
SHA1
27c8586395929808079600dc9693f6b2e141a456
-
SHA256
16bca33367bc596ad701c0c530bef0d8f4951ca8edb5250707ce7f355aefde00
-
SHA512
eb88aa3dc739006a1d665dedd0c4b1a1a86d2a417cb181730dde00db4be92e07bcfb3bbb3ed2a9a83b63ee22d1c15405f364a5fdd574f537f23945f2b2e203a8
-
SSDEEP
6144:qUHb06nZ6jXhg8RcFC50e7awBYE7dXHsdzi6lLB7mKPTcW+Kjkw8:RHb060jXO8RcFwYeM9ZXlhvK
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource c20f4277d8e8f02c58c6db856c8dc4a5 unpack001/out.upx
Files
-
c20f4277d8e8f02c58c6db856c8dc4a5.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 456KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 244KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 67KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 387KB - Virtual size: 386KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 124KB - Virtual size: 123KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 67KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 66KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ