Behavioral task
behavioral1
Sample
4720254a0d062c598111b9ed3edc33836bbe26ea0a81b8f4dc832d7f349173e6.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
4720254a0d062c598111b9ed3edc33836bbe26ea0a81b8f4dc832d7f349173e6.exe
Resource
win10v2004-20240508-en
General
-
Target
4720254a0d062c598111b9ed3edc33836bbe26ea0a81b8f4dc832d7f349173e6
-
Size
14.6MB
-
MD5
2629558c752f7cb648f6c25c6eb48c9a
-
SHA1
3e5a134dc51816f7a7091af9b12b0979446ed369
-
SHA256
4720254a0d062c598111b9ed3edc33836bbe26ea0a81b8f4dc832d7f349173e6
-
SHA512
86e7cc777d270ada7ffb388a2aa64c59225435822e86cf2cd3023a3dee9a2db90ac9947f277334fe4a4e00fc8148ad8d100bae92196ec7b55da07852f844afc8
-
SSDEEP
393216:p9AieeDuMEZynTSCEhVA/Ujax5gHQ5+1qINTQlz7JEvgGHyd+:p9meDUQOFHj3wQ1q+AzCgIi+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 4720254a0d062c598111b9ed3edc33836bbe26ea0a81b8f4dc832d7f349173e6 unpack001/out.upx
Files
-
4720254a0d062c598111b9ed3edc33836bbe26ea0a81b8f4dc832d7f349173e6.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 16.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 14.6MB - Virtual size: 14.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 496KB - Virtual size: 494KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 30.3MB - Virtual size: 30.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 72KB - Virtual size: 134KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ