General
-
Target
TEST.exe
-
Size
61KB
-
MD5
1fc7057e3a64fb047aa9563f31b37523
-
SHA1
20840be5360448889dc7d2a61b29d82ec7ff922f
-
SHA256
e9e653de560c457f3955f7dbdb4384b3cb938fc800cbfa2d0f298d1d1ff4d259
-
SHA512
14d1e60fe35bb87f3ee3202609b9505c7496633f0365f425ac2f9df4afa6d13b4fafa97f79a9fadb5e09c9a8cac7508bc17b249ba0d8633ac4220899ae11f623
-
SSDEEP
1536:KEiBwAw/cGYQi1y2QNAx1FcLD12Qs7yGVd7Ulnouy8B+IR2Lp:8B9wUGYQN2XD6UdYoutB+IEl
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource TEST.exe
Files
-
TEST.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 80KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE