Behavioral task
behavioral1
Sample
1477c6cb4c3c04547a9114cb9741d46798718c0064a5b5706354c4b1dc5169bf.exe
Resource
win7-20240508-en
General
-
Target
1477c6cb4c3c04547a9114cb9741d46798718c0064a5b5706354c4b1dc5169bf
-
Size
9.2MB
-
MD5
98502d3a363dfbbb7f5bcdb16107fb9a
-
SHA1
998e24d84746bdd1e9f752eda66da15208054b56
-
SHA256
1477c6cb4c3c04547a9114cb9741d46798718c0064a5b5706354c4b1dc5169bf
-
SHA512
0592e1b149499094d959b1a0606e75df9f5599ad62fe7ebdb1d61327b0ab5f8432551e94656f5d39f9ccb920c1da36e16e3162c299cbd2f890f848ffb244f3bb
-
SSDEEP
196608:L6lqMfh/Exb2Vfh+K1T515ayp1YxQFIYE+oa5dS0VtJUryO0glUy3c6M:LSqkh5Vh5PaM1YxQzE+rjSQcrsf
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 1477c6cb4c3c04547a9114cb9741d46798718c0064a5b5706354c4b1dc5169bf unpack001/out.upx
Files
-
1477c6cb4c3c04547a9114cb9741d46798718c0064a5b5706354c4b1dc5169bf.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 3.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 9.1MB - Virtual size: 9.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 148KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 596KB - Virtual size: 592KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11.5MB - Virtual size: 11.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 96KB - Virtual size: 259KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 164KB - Virtual size: 161KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ