Behavioral task
behavioral1
Sample
864faa27c483297a317c38e2cd5e19b0N.exe
Resource
win7-20240708-en
General
-
Target
864faa27c483297a317c38e2cd5e19b0N.exe
-
Size
117KB
-
MD5
864faa27c483297a317c38e2cd5e19b0
-
SHA1
184ccc3596f5bfa074e16a77cd5578dde3a821dc
-
SHA256
95ef75b57f0ee345bfda9bea832b83ed9e05a8051d4c8e9a9e3d3d0f386b5e26
-
SHA512
73d6ff9cc835d181aede05a04aa733d9b48f384b3415ebb01c0c2948610d0c1c00fa850f08d33b8b8e8c5171914904e8e8e66d422ac88a801e2fd4d28ce8f5b1
-
SSDEEP
1536:CTW7JJ7TTQoQoto64TmXadjUSbcDemTPAZk+cLtdNlb9PfESDOayxaJW:hoRotg6W2QZwKS7A
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 864faa27c483297a317c38e2cd5e19b0N.exe unpack001/out.upx
Files
-
864faa27c483297a317c38e2cd5e19b0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ