Behavioral task
behavioral1
Sample
c97243c8d6393f95fdb8b7fbb621075002f99b22bf884a99fdd3f5ba95e5de5e.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
c97243c8d6393f95fdb8b7fbb621075002f99b22bf884a99fdd3f5ba95e5de5e.exe
Resource
win10v2004-20240426-en
General
-
Target
c97243c8d6393f95fdb8b7fbb621075002f99b22bf884a99fdd3f5ba95e5de5e
-
Size
7.5MB
-
MD5
124b2b8ef3a1682cd4c0c8229455a060
-
SHA1
75902368dddef53de1cc8edb5b5c39f6d719440e
-
SHA256
c97243c8d6393f95fdb8b7fbb621075002f99b22bf884a99fdd3f5ba95e5de5e
-
SHA512
53cb899afedc34b2da5eb94a7cd3a754be4d3025ec411ee22d3a94e8f8b48310a9d798a1bb3743676f4a65276c64621525fb1238647e391cea57375acb67bad2
-
SSDEEP
196608:gPsleg7A4b8BJBQ6OPx+ygJElchd80lP+GwrWspL9jzoDiq75h4:FWeOEpgeQ+zaqLi7M
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource c97243c8d6393f95fdb8b7fbb621075002f99b22bf884a99fdd3f5ba95e5de5e unpack001/out.upx
Files
-
c97243c8d6393f95fdb8b7fbb621075002f99b22bf884a99fdd3f5ba95e5de5e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 3.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4.6MB - Virtual size: 4.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 160KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6.5MB - Virtual size: 6.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 84KB - Virtual size: 332KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 176KB - Virtual size: 175KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ