Behavioral task
behavioral1
Sample
b1ed1f2ced604e04d3549071898ad430N.exe
Resource
win7-20240729-en
General
-
Target
b1ed1f2ced604e04d3549071898ad430N.exe
-
Size
85KB
-
MD5
b1ed1f2ced604e04d3549071898ad430
-
SHA1
ffcd3a4a105d918d9523f7969a91b9693d0285a3
-
SHA256
63adccd8a05c5ec4bbc234732341e0ea98df191b5d4d86eba45f5235cc972d33
-
SHA512
31329a2190d7e2af0ac1524ab1a2ad2ffe803b260712ccfd27b5d147aabab6336f1bb385d563572a39f24097da413a8cc9b65237c2f826ba2a8110d4d1e91c8f
-
SSDEEP
768:kBT37CPKKdJJcbQbf1Oti1JGBQOOiQJhATB8:CTW7JJZENTB8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource b1ed1f2ced604e04d3549071898ad430N.exe unpack001/out.upx
Files
-
b1ed1f2ced604e04d3549071898ad430N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ