Behavioral task
behavioral1
Sample
a0672cb4ef9a5946eff4d3359a59d2c0N.exe
Resource
win7-20240705-en
General
-
Target
a0672cb4ef9a5946eff4d3359a59d2c0N.exe
-
Size
132KB
-
MD5
a0672cb4ef9a5946eff4d3359a59d2c0
-
SHA1
9c5646686932bcb21a81b3ff73630b0b8c3c23b0
-
SHA256
8b90ff6bd64b1ecfd8353a9bf49e687a32632a013a5c1adea4085778bf5d16f9
-
SHA512
2a34a9b587b892c2a9e9865f3a9fb502f69c39fd67633331723b49c05ccba822c40c292f4bb8848d6df3df8432d6fc63000bbe6974ef7921d0a543ea56db32aa
-
SSDEEP
1536:CTWn1++PJHJXA/OsIZfzc3/Q8zxY5GWr4EhNwNFkNXNFpiFu9Fy2XNgNFVNVNFog:KQSox5z4W+0JO2XKFbd0C
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource a0672cb4ef9a5946eff4d3359a59d2c0N.exe unpack001/out.upx
Files
-
a0672cb4ef9a5946eff4d3359a59d2c0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ