Behavioral task
behavioral1
Sample
05d39d631d8d7bab0deb689943f69b5e0c341d3f9958041e8aaadf270af39fbf.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
05d39d631d8d7bab0deb689943f69b5e0c341d3f9958041e8aaadf270af39fbf.exe
Resource
win10v2004-20240419-en
General
-
Target
05d39d631d8d7bab0deb689943f69b5e0c341d3f9958041e8aaadf270af39fbf
-
Size
16KB
-
MD5
6125bb267948fc6df3dca47a6a3d582e
-
SHA1
753c9d837a569ff26810722fe3fb27743237d90f
-
SHA256
05d39d631d8d7bab0deb689943f69b5e0c341d3f9958041e8aaadf270af39fbf
-
SHA512
4e15e31180dc07e0b27b38b1511dfeb6d1835c5eb90f4139f2aab4fc78ef88e3e57c327ca7b23d52ab0a52c638e2dbcaf262eaf677572741acb2fe9cb8c00268
-
SSDEEP
384:tfI9h5Bx8MlUktE1uE+6vcbV4A2XyyTfGD15GbaGY3+rJg80wg3:tGhd8hkC1tEbV4NQD18Y36H0wg
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 05d39d631d8d7bab0deb689943f69b5e0c341d3f9958041e8aaadf270af39fbf unpack001/out.upx
Files
-
05d39d631d8d7bab0deb689943f69b5e0c341d3f9958041e8aaadf270af39fbf.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 80KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE