Behavioral task
behavioral1
Sample
d4aec9b3da9a9da91b02b4e8753f2afc.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d4aec9b3da9a9da91b02b4e8753f2afc.exe
Resource
win10v2004-20231215-en
General
-
Target
d4aec9b3da9a9da91b02b4e8753f2afc
-
Size
140KB
-
MD5
d4aec9b3da9a9da91b02b4e8753f2afc
-
SHA1
dd6c310001b06225ded263d338d0db7452484bc3
-
SHA256
9bcb63c2cdef17bb56f73c415eb227641da962e770cc9f5507a3009951c773de
-
SHA512
4b72f63372b154e617fc18801f43732a50983dac56474f38f236a5136c67994b19fd0697f6304e9f94dbb8961b2c3c4d938a85f1b045ae0626b2ac718a884079
-
SSDEEP
3072:XXD1kdqnIeoaPPV2swqi+aywrDo9QlTPVeoDPza+s6IyB:XvIeoaEqi+dwnyQlTsSzZ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource d4aec9b3da9a9da91b02b4e8753f2afc unpack001/out.upx
Files
-
d4aec9b3da9a9da91b02b4e8753f2afc.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 11.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 128KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 10.6MB - Virtual size: 10.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.000 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
.000 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
.000 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
.000 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
.rdata Size: 196KB - Virtual size: 196KB
IMAGE_SCN_MEM_READ
.data Size: 21KB - Virtual size: 24KB
IMAGE_SCN_MEM_READ
.idata Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 648KB - Virtual size: 647KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ