Behavioral task
behavioral1
Sample
f20f614783ea0bcbdf9fce6b95cb1750N.exe
Resource
win7-20240705-en
General
-
Target
f20f614783ea0bcbdf9fce6b95cb1750N.exe
-
Size
111KB
-
MD5
f20f614783ea0bcbdf9fce6b95cb1750
-
SHA1
0842f0508853fef0f5f492f56ad7bc2a6f5594d7
-
SHA256
199b54bce6c00a072567b762fc10d3a6552dbb98a69734b458842d08b9c5309d
-
SHA512
f702063615a53464f9ded1559eb92e5ffa39acdbb8352ed5adbe3ecc5d8351eb7e5a695cdcb65a6d5cd3f6e792c0dad56caf16b5c37549d9963e6ae10cfa0d8a
-
SSDEEP
1536:CTW7JJ7TTQoQ4TmXadjUSbcDemTPAZk+cLtdNlb9PfESDOayxaJX:hoR46W2QZwKS7R
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource f20f614783ea0bcbdf9fce6b95cb1750N.exe unpack001/out.upx
Files
-
f20f614783ea0bcbdf9fce6b95cb1750N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ