Behavioral task
behavioral1
Sample
12f5f5af97e414b0eeecb5c67e8a9d7841a8f7c070cc7a5c24af341eefa50214.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
12f5f5af97e414b0eeecb5c67e8a9d7841a8f7c070cc7a5c24af341eefa50214.exe
Resource
win10v2004-20240704-en
General
-
Target
12f5f5af97e414b0eeecb5c67e8a9d7841a8f7c070cc7a5c24af341eefa50214
-
Size
47KB
-
MD5
57aec27ad844486843aba4c75480c70d
-
SHA1
2c12976a7b2a215474ac4f1a5270ebc062feca32
-
SHA256
12f5f5af97e414b0eeecb5c67e8a9d7841a8f7c070cc7a5c24af341eefa50214
-
SHA512
5f100b993bc189119ba109073e2c20fafbd07435335e6fb9229583cfde5d4e2b501a74e71d9b042c448dfc3c2d53ee28ae106464c4ed0a2dd047e5c4e9904fbf
-
SSDEEP
768:kBT37CPKK1EXBwzEXBw3sgQw58eGkz2rcuesgQw58eGkz2rcuiBT37CPKK1EXBw5:CTWBTWN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 12f5f5af97e414b0eeecb5c67e8a9d7841a8f7c070cc7a5c24af341eefa50214 unpack001/out.upx
Files
-
12f5f5af97e414b0eeecb5c67e8a9d7841a8f7c070cc7a5c24af341eefa50214.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ