Behavioral task
behavioral1
Sample
6a9a7f3e655c421414b98bf723e5ec7b5a8a4b67211d1ee58ca58a7b8573ee0b.exe
Resource
win7-20240705-en
General
-
Target
6a9a7f3e655c421414b98bf723e5ec7b5a8a4b67211d1ee58ca58a7b8573ee0b
-
Size
1.4MB
-
MD5
c08206a3d9588e6a613a71e2a25a6179
-
SHA1
549296dc87e09b1f43254645025fb48f101c22bb
-
SHA256
6a9a7f3e655c421414b98bf723e5ec7b5a8a4b67211d1ee58ca58a7b8573ee0b
-
SHA512
35333e7bc1c76e45655f7d1751b9a2824fe1ec679bf555718c66df2f99edcfff72843fa1df149f1b63b702c808783f5e9a0f928c05b9c1f38b90a98bcb91bd0a
-
SSDEEP
24576:GtteK1ftbP1sQTQ7NkYTOXg6riTu+MLQPb6WACBL+/bduYke3JM+UNcT2uYm3NDd:GeK1ftbPCQTUNkKqPyuzWAkL+TduYkeT
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 6a9a7f3e655c421414b98bf723e5ec7b5a8a4b67211d1ee58ca58a7b8573ee0b unpack001/out.upx
Files
-
6a9a7f3e655c421414b98bf723e5ec7b5a8a4b67211d1ee58ca58a7b8573ee0b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 752KB - Virtual size: 749KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 108KB - Virtual size: 450KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 88KB - Virtual size: 86KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ