Behavioral task
behavioral1
Sample
66edd2c4f52b7eb94c7e4572876829b439725d13e1364bed0b27605515c94e61.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
66edd2c4f52b7eb94c7e4572876829b439725d13e1364bed0b27605515c94e61.exe
Resource
win10v2004-20240226-en
General
-
Target
66edd2c4f52b7eb94c7e4572876829b439725d13e1364bed0b27605515c94e61
-
Size
704KB
-
MD5
5f94dd722a9fd91fa8c6635d26ebb5d0
-
SHA1
d7fac88452b166c191005a163d1567aec02a5d4d
-
SHA256
66edd2c4f52b7eb94c7e4572876829b439725d13e1364bed0b27605515c94e61
-
SHA512
b302d5262939bb25d5299c42a129369a32bd99f63abc2a440d23115074a53c252f793e0e4b77a013fe7dee411e1dff232c5e17c80f4ef29caf5ddd4560d2c6e0
-
SSDEEP
12288:8NCBnmH/1F5+tN5b6nyUjA52Xfcuo8mA4++fea:8UBmH9F58V6nLAkXfo8E++m
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 66edd2c4f52b7eb94c7e4572876829b439725d13e1364bed0b27605515c94e61 unpack001/out.upx
Files
-
66edd2c4f52b7eb94c7e4572876829b439725d13e1364bed0b27605515c94e61.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 696KB - Virtual size: 696KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.textbss Size: - Virtual size: 917KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 319KB - Virtual size: 318KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 357KB - Virtual size: 376KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.didat Size: 1024B - Virtual size: 793B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ