Behavioral task
behavioral1
Sample
945bc7b91ae50b0f4d0b25908fc570050628bd09fee62639226b5645862df041.exe
Resource
win7-20240705-en
General
-
Target
945bc7b91ae50b0f4d0b25908fc570050628bd09fee62639226b5645862df041
-
Size
1.3MB
-
MD5
079f51c98521eddd477e86a930c4d417
-
SHA1
3646671c9ed0ecfdefee80dc16e3a4c821d61dc6
-
SHA256
945bc7b91ae50b0f4d0b25908fc570050628bd09fee62639226b5645862df041
-
SHA512
a918bfd56ba2f528e38d40554e210a7688bc77a566152f53862fc3108b6f6688803f162529dc497aab357e0e409e624e97c1e10f02fc59fa00f9ad7fdae9b909
-
SSDEEP
24576:uphUB5n24h1u1mC6WQ9t4ssA4MahS0VXzAK1JaUdx/j1WCZTgpaB1:upcJ29mC6XI355aqnCpI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 945bc7b91ae50b0f4d0b25908fc570050628bd09fee62639226b5645862df041 unpack001/out.upx
Files
-
945bc7b91ae50b0f4d0b25908fc570050628bd09fee62639226b5645862df041.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 5.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3.7MB - Virtual size: 3.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 124KB - Virtual size: 496KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ