Behavioral task
behavioral1
Sample
843597b1d3369f6c2a547e84b146c8f949f636b88bbe9d41243f5c13e4b18452.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
843597b1d3369f6c2a547e84b146c8f949f636b88bbe9d41243f5c13e4b18452.exe
Resource
win10v2004-20240412-en
General
-
Target
843597b1d3369f6c2a547e84b146c8f949f636b88bbe9d41243f5c13e4b18452
-
Size
2.6MB
-
MD5
a6c823d002db725529be4ac4be04e698
-
SHA1
aef04797405628e8d584e4f312a5f2a85ac17140
-
SHA256
843597b1d3369f6c2a547e84b146c8f949f636b88bbe9d41243f5c13e4b18452
-
SHA512
1ee4c62578905e24e001078ded8edc76240371bb019d686b6a557945c8a4a14552911e0c0027a65c462be740fb8b5de71c6bb43f4f83ee46fea7da49ae2667d5
-
SSDEEP
49152:Tb78X5I6o+hbbmlLgdqZAHl+WO14Lm3LGGsYLjBMev68eI4/QNqjN2C2B595ZM4p:XoJIYRmtZAHl+WO14LwGGDzZeI4/QNku
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 843597b1d3369f6c2a547e84b146c8f949f636b88bbe9d41243f5c13e4b18452 unpack001/out.upx
Files
-
843597b1d3369f6c2a547e84b146c8f949f636b88bbe9d41243f5c13e4b18452.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 5.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4.8MB - Virtual size: 4.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 136KB - Virtual size: 413KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ