Behavioral task
behavioral1
Sample
cac2b9b8a88d8dede6d0963f4d587784.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
cac2b9b8a88d8dede6d0963f4d587784.exe
Resource
win10v2004-20231215-en
General
-
Target
cac2b9b8a88d8dede6d0963f4d587784
-
Size
11KB
-
MD5
cac2b9b8a88d8dede6d0963f4d587784
-
SHA1
d238f7dec899545c1f28f2cde696f03904cee184
-
SHA256
aea1f295505e36225090e5cd1d0e251730136890dd7a81c48dfc8db4cbb7d22c
-
SHA512
826967a6f2189649f3ae7d3ec2b74054fd070e0d1e0d4f0ca8d19c2845187b6f8a212488e4b1260351dee6e6cb9e75f9403d14f0da680dc66c55de91af31cac6
-
SSDEEP
192:KbOf6qJdazo1Y5zrN5glO5dWixXNxorcEkDeKdnrjOZQvVYn68:Kyfkzo1Y5fgiTXNxojeHJOZcE
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource cac2b9b8a88d8dede6d0963f4d587784 unpack001/out.upx
Files
-
cac2b9b8a88d8dede6d0963f4d587784.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 388B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ