General
-
Target
xx.exe
-
Size
19.8MB
-
MD5
b6c180ce13e3a8be55e9a7fd22966de2
-
SHA1
9b0e0b5883d9bfd5d6db0ff00079476c6c2e4720
-
SHA256
fe40fb379bdf1ac156e5a8a75b61bc17de60cc5147f40df1d2bebd3d2d08fa6e
-
SHA512
e3c20c8e72d6070855dc3e089894970026319b5c56c1bb2a06f2d4921a2391e4e7a18825c61ef441899a71208ae4b7d46e75c8cb0c491d61e3d9dc3482005d1b
-
SSDEEP
393216:j4EkZQtstQdqGL01+l+uq+VvUdQJluwF3MnG3oTl5M9OJBheZWdpiF5ZHm:EhQtstqj01+l+uqgvUdQz3MGY3k8KOEG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource xx.exe
Files
-
xx.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 240KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 125KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 61KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
xx.pyc