Behavioral task
behavioral1
Sample
ba57bd6b6944fb5517aec496edbd64ad532a10ae0d1e0470d07a3a02840209e6.exe
Resource
win7-20240708-en
General
-
Target
ba57bd6b6944fb5517aec496edbd64ad532a10ae0d1e0470d07a3a02840209e6
-
Size
1.6MB
-
MD5
a9ada29086fb7e9061bfe23977a0c783
-
SHA1
ee98fb0cece38eab902c04ce8dbcd84615be2938
-
SHA256
ba57bd6b6944fb5517aec496edbd64ad532a10ae0d1e0470d07a3a02840209e6
-
SHA512
16725b832b10fe7a4f11f037039909f279039c06482ef7abbec98152f161a0c440d5aad3604cacef5d1a504af44f1410ed36f2b6d827655c9d68e89c605386a5
-
SSDEEP
49152:EZoets1vQ7toe4Isw/DWPlGboPgTKYGH/yk16nQvQftCh:EWetsK7Ke416CPEoPgTTGfyk1Gn
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource ba57bd6b6944fb5517aec496edbd64ad532a10ae0d1e0470d07a3a02840209e6 unpack001/out.upx
Files
-
ba57bd6b6944fb5517aec496edbd64ad532a10ae0d1e0470d07a3a02840209e6.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 592KB - Virtual size: 589KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3.8MB - Virtual size: 3.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 96KB - Virtual size: 326KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ