Behavioral task
behavioral1
Sample
r3dfox-126.0.en-US.win64.installer.exe
Resource
win7-20240419-en
General
-
Target
r3dfox-126.0.en-US.win64.installer.exe
-
Size
59.4MB
-
MD5
a9d76c9f8b4353e65b4be8008ce7d8b6
-
SHA1
c6aa248d11ea6b2e1869e4654c3be90a464f50d1
-
SHA256
77f1c52537fb501d34f1fe45a93be3e8d9fc509d0fb6cfcf11835f0d3603e381
-
SHA512
3d2709f956406b011541dc83e96bb9a193a79d2f7ab0ff205ab2473a691e12bca8e614500fcf53967d0016a560f189113e97dab49f5b3263735586725d6d0b5d
-
SSDEEP
1572864:FWF0PPBg1U/LPR7g1+b20JqFAVckEpTqk24jX:4FGgW+1+bfJqsiEYX
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource r3dfox-126.0.en-US.win64.installer.exe unpack001/out.upx
Files
-
r3dfox-126.0.en-US.win64.installer.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 144KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 61KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 63KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 105KB - Virtual size: 105KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 63KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ