Behavioral task
behavioral1
Sample
c67e3d62aeeec8526fde250728aeb002.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c67e3d62aeeec8526fde250728aeb002.exe
Resource
win10v2004-20231215-en
General
-
Target
c67e3d62aeeec8526fde250728aeb002
-
Size
11KB
-
MD5
c67e3d62aeeec8526fde250728aeb002
-
SHA1
69536c351b1e7e4288e586817b24fcf14e27dea7
-
SHA256
ee72329dc43168d1a00341a84c0b3f1f4dd908b3f4cc1fe60f70d71c67101657
-
SHA512
927db37f6ee756fe1abee5759c905dd94b5de0e6201811a5b9931789b0f74b2d8b915980c3d616d0490b8ec32cd55e8708f0765a9365888361dc5ab3c6b469b6
-
SSDEEP
192:OLvD3fFmJGZ+BPfqRX9IuYS47BudEQltO2OZvcYXAaww9cjBg3iQ0WPzknA0ybe:OffgJGspBqGOO2IbXAaww9uuiFyzknAC
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource c67e3d62aeeec8526fde250728aeb002 unpack001/out.upx
Files
-
c67e3d62aeeec8526fde250728aeb002.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 372B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ