Behavioral task
behavioral1
Sample
graflerUPX.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
graflerUPX.exe
Resource
win10v2004-20240611-en
General
-
Target
graflerUPX.exe
-
Size
68KB
-
MD5
09b562d0a06ea51dd91cf9dd65e38de9
-
SHA1
58fcc1159782c62fc727b71e48299e70be4946b9
-
SHA256
c4fd0ee6a5828a5bdd58116778f89fa2b083671fc0aff1c4164f46f0a0a0ec45
-
SHA512
2dbabc58a0be508da0b55bc9c7a734a3525c18e81099fd10b535cdfa2b027f59bc51d51166e851be69bb7dfe0111dafb761a30c076707cb0f74e1bff3bd8b16e
-
SSDEEP
1536:REjoCL8Ac2d3F/wreFLdSH7cM5Mj9wi+dMZ3GCU5Tg2owLxva:5pAX7oy5wb158+0nUBN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource graflerUPX.exe
Files
-
graflerUPX.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 128KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 66KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE