Behavioral task
behavioral1
Sample
821a8127e36a01cc98e38a2c24249dd7453768a3532e0f6911596728ab85d3ab.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
821a8127e36a01cc98e38a2c24249dd7453768a3532e0f6911596728ab85d3ab.exe
Resource
win10v2004-20240226-en
General
-
Target
821a8127e36a01cc98e38a2c24249dd7453768a3532e0f6911596728ab85d3ab
-
Size
13.8MB
-
MD5
bfd3fa16ff4b6d328915fcd194cfc090
-
SHA1
38b134bac9d611369151244f616804f5700b46bf
-
SHA256
821a8127e36a01cc98e38a2c24249dd7453768a3532e0f6911596728ab85d3ab
-
SHA512
a6f5eaa2b119369c194822c6b96f4210e345594a9c7e520ca1d7dabf2984711c77b2c8ab94800b97b38c4365948a3114fda4a6f1abf07058d899d1bc60d87b22
-
SSDEEP
393216:cB1JLEr4crFZSNE9K43YaUOKMcEe4nj2y:w1JLirFZSC9KKKE
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 821a8127e36a01cc98e38a2c24249dd7453768a3532e0f6911596728ab85d3ab unpack001/out.upx
Files
-
821a8127e36a01cc98e38a2c24249dd7453768a3532e0f6911596728ab85d3ab.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 13.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 13.7MB - Virtual size: 13.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 415KB - Virtual size: 414KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 30KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24.7MB - Virtual size: 24.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 143KB - Virtual size: 143KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ