Behavioral task
behavioral1
Sample
9dcf6f34efbdd6cb8a233931b9ad49761bfe29e0e1cd1db542c2ee7700772615.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
9dcf6f34efbdd6cb8a233931b9ad49761bfe29e0e1cd1db542c2ee7700772615.exe
Resource
win10v2004-20231215-en
General
-
Target
9dcf6f34efbdd6cb8a233931b9ad49761bfe29e0e1cd1db542c2ee7700772615
-
Size
2.4MB
-
MD5
75362e96ff2fb044920303bcaf303212
-
SHA1
04b81e720577766d04a94c19059adeb65afda970
-
SHA256
9dcf6f34efbdd6cb8a233931b9ad49761bfe29e0e1cd1db542c2ee7700772615
-
SHA512
a75ca29a4a6be5e08d15a5f974627d83702b6ef102a324f84797045657712ec8d04db575b4c00e1a323ba59722645760c39bfc685e28f4e6e0687132baf78576
-
SSDEEP
49152:bE10GsPKk8xr+T07wEk8XLinLA3NGlirMJzUthu/Lr64MN3Zrmwpb:bSsPKkNT07wmLqLA3NGPULyWj3Zrbb
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 9dcf6f34efbdd6cb8a233931b9ad49761bfe29e0e1cd1db542c2ee7700772615 unpack001/out.upx
Files
-
9dcf6f34efbdd6cb8a233931b9ad49761bfe29e0e1cd1db542c2ee7700772615.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE