Behavioral task
behavioral1
Sample
c5a2f57ac7b405068bc72d260bf4be62.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c5a2f57ac7b405068bc72d260bf4be62.exe
Resource
win10v2004-20240226-en
General
-
Target
c5a2f57ac7b405068bc72d260bf4be62
-
Size
152KB
-
MD5
c5a2f57ac7b405068bc72d260bf4be62
-
SHA1
ea50032c7c1b41da93ff7dfd7860d4264ccb63a2
-
SHA256
dbf29a6b3af6c9edcdbdbb5ee20274ce6f9e9a724b73d7078330b80bf8f66d16
-
SHA512
92560a78426d02de594d0173511a0bcf206ac3acfd5d59b2ad7d14ef426c635526b61fe4f8246d10e512ff850ad86b02cd8732e231e5f5eb405a81c08b8b4147
-
SSDEEP
3072:OcWBUijL76OzpJu2xCnva5K2+JsPYKU5TWt7x6F5y9zL/dyAC4FN:O7BhzPjuQ+JsYGt7M29zLlRF7
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource c5a2f57ac7b405068bc72d260bf4be62 unpack001/out.upx
Files
-
c5a2f57ac7b405068bc72d260bf4be62.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.swwtma Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tpivci Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.nqvm Size: 1024B - Virtual size: 969B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.iqqo Size: 83KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bvdsk Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ