Behavioral task
behavioral1
Sample
d6f8a60a18e155e0f96273a4e61c06ff.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
d6f8a60a18e155e0f96273a4e61c06ff.exe
Resource
win10v2004-20240226-en
General
-
Target
d6f8a60a18e155e0f96273a4e61c06ff
-
Size
563KB
-
MD5
d6f8a60a18e155e0f96273a4e61c06ff
-
SHA1
2a0915a7203bb5bd4cbae4d7ba8ea77e975da5dc
-
SHA256
2cb1c1741808330ee33c8976a2200af2de99de9eb147bdba588df6358a2ac3c2
-
SHA512
b278f2eff79400f91814f6a1403d5cf779297adbba9f11372a61549b6c326989d063eb21858db4aecce70ee1d8122e54af3cd445248a51165d5aa7a61d6f1e73
-
SSDEEP
12288:qG+Bp3c7XZNAdD43td2e/XMeXu0PiB5HJOB0F43kzC+YYaPm10B:qNp36oe2eXMeXujHwuqo4myB
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource d6f8a60a18e155e0f96273a4e61c06ff unpack001/out.upx
Files
-
d6f8a60a18e155e0f96273a4e61c06ff.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 555KB - Virtual size: 556KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 664KB - Virtual size: 662KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 904KB - Virtual size: 903KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 72KB - Virtual size: 327KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ