Behavioral task
behavioral1
Sample
d5ee12ac5f3ded7fb84dc5c69c2ea480.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d5ee12ac5f3ded7fb84dc5c69c2ea480.exe
Resource
win10v2004-20240226-en
General
-
Target
d5ee12ac5f3ded7fb84dc5c69c2ea480
-
Size
124KB
-
MD5
d5ee12ac5f3ded7fb84dc5c69c2ea480
-
SHA1
645ae308f09919e10ae86b595f8d325b1f0cbde1
-
SHA256
c6f6de1f149cf7fba8df27069022dcf10a404ad5618f9d0ee4034a1b931c660e
-
SHA512
3cd40565a9832ea6ea393b736a3d436e7bcfcc6cd2d8d8ab9b3700113d045a978255b48ad5ab92afeb6f0111de10eb9c6bfe4046d42330e1933df03a5b9a7533
-
SSDEEP
3072:uifRL+q31nJBXOXVh06/0NEUYynNELl1RAX61qrZLnVnN:ffBZ1nJ0Z/MY2ilfAq1IZT
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource d5ee12ac5f3ded7fb84dc5c69c2ea480 unpack001/out.upx
Files
-
d5ee12ac5f3ded7fb84dc5c69c2ea480.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 32KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ