Behavioral task
behavioral1
Sample
c989206d13f0fef56a5bcb4822958af48e8b4a1606c2b5acafd519c460aee072.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
c989206d13f0fef56a5bcb4822958af48e8b4a1606c2b5acafd519c460aee072.exe
Resource
win10v2004-20240508-en
General
-
Target
c989206d13f0fef56a5bcb4822958af48e8b4a1606c2b5acafd519c460aee072
-
Size
1.9MB
-
MD5
da579bc5f7475e0cf03c9a3c1efd60d0
-
SHA1
2a42a4ad7277ddbfc4836b5207cf61c46cda9738
-
SHA256
c989206d13f0fef56a5bcb4822958af48e8b4a1606c2b5acafd519c460aee072
-
SHA512
f6876532892b9ff948b436809e39cb5e56a13f254a302bf5acf6c5f2c64c57d18f09d6d261282061bfd50a0f9a2fd623365bd6474e5f76177f32322c5c85b25b
-
SSDEEP
24576:pDj2qCTcORo5LzKtG1bO+wbT6U5oT/HV2f1UV8///CbUm7XRQV7bJOy44go8PeW6:p/2lcMxEfBTHY1B//k7X+V7bwyPoHXi
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource c989206d13f0fef56a5bcb4822958af48e8b4a1606c2b5acafd519c460aee072 unpack001/out.upx
Files
-
c989206d13f0fef56a5bcb4822958af48e8b4a1606c2b5acafd519c460aee072.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 4.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 291KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2.9MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 392KB - Virtual size: 646KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 308KB - Virtual size: 306KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ