Behavioral task
behavioral1
Sample
817931121a21687b02c63a8addf0b0f1107ab09bdfb76156ff66d33a5845131f.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
817931121a21687b02c63a8addf0b0f1107ab09bdfb76156ff66d33a5845131f.exe
Resource
win10v2004-20240508-en
General
-
Target
817931121a21687b02c63a8addf0b0f1107ab09bdfb76156ff66d33a5845131f
-
Size
10.9MB
-
MD5
05ede8239a7bf3feaa23fce306e1867c
-
SHA1
17b9e0c2fde97b6a1dd21c29c5415300c1f8f1de
-
SHA256
817931121a21687b02c63a8addf0b0f1107ab09bdfb76156ff66d33a5845131f
-
SHA512
88d08901ed102b11b8cd7dc7e77f458922e79b888d5b158ef20d70990d142c4e3b665fdc589e79756006eda05b507e1564a95350824a254a3a6bf050a3d70be9
-
SSDEEP
196608:9wCdpQEHL2ajw7r4RMKKnqk936Iydc1IAxHbG6rjYNX5HZgqndKV/Sns:dsH7Rnl6IzeANC6PY952qnq/Gs
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 817931121a21687b02c63a8addf0b0f1107ab09bdfb76156ff66d33a5845131f unpack001/out.upx
Files
-
817931121a21687b02c63a8addf0b0f1107ab09bdfb76156ff66d33a5845131f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 7.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2.0MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6.3MB - Virtual size: 6.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 112KB - Virtual size: 407KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ