Behavioral task
behavioral1
Sample
56472987f2baf640dffc99b3e49b7b70N.exe
Resource
win7-20240729-en
General
-
Target
56472987f2baf640dffc99b3e49b7b70N.exe
-
Size
116KB
-
MD5
56472987f2baf640dffc99b3e49b7b70
-
SHA1
78ca69d527a80a489de56850fba40f3f3980223e
-
SHA256
aceb925ff51a8ef18133471dbc38b32f0684d1be5dd61d4ffe319e7006cda119
-
SHA512
a1dfd9520569645bcc54f017de18c2713ccdfd2defac48c78f0d7f8bbdb2f5efcae1eef02b16a9bad4f4183d9799e39674ff9de4afe7b5953bf04c76bdfe7e14
-
SSDEEP
1536:CTWn1++PJHJXA/OsIZfzc3/Q8zxdkJE8myuaXuCOK3R1Ela+oep2Ake2:KQSo6IX1N3cboes1e2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 56472987f2baf640dffc99b3e49b7b70N.exe unpack001/out.upx
Files
-
56472987f2baf640dffc99b3e49b7b70N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ