Behavioral task
behavioral1
Sample
1951409cd58a773fb163781c02872440N.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
1951409cd58a773fb163781c02872440N.exe
Resource
win10v2004-20240709-en
General
-
Target
1951409cd58a773fb163781c02872440N.exe
-
Size
881KB
-
MD5
1951409cd58a773fb163781c02872440
-
SHA1
17cf249a6ef496b46aae5fff60cab22830a810e0
-
SHA256
7a1387a2d29a3063614a5af6a00c09ba43572d8093607adf31cdf6dee16dcec3
-
SHA512
dcb93e69f017026cd265a84137afd09d1584b8b847db21d3b5144c6a067c63c1eba8c20acf2100f3be198296f4857798c36ecd11aa5878f33a3b95175feddd18
-
SSDEEP
24576:3sgStIRb9GdRY5mOCI40ohE+UouFn2vjcGWQ:cgNRbsdRgiI40wE+UouF2vYrQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 1951409cd58a773fb163781c02872440N.exe unpack001/out.upx
Files
-
1951409cd58a773fb163781c02872440N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 740KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 875KB - Virtual size: 876KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 520KB - Virtual size: 518KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 876KB - Virtual size: 873KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 60KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ