Behavioral task
behavioral1
Sample
b05d88312ce6028c63ae0f73f4930e77a6781a94d0456f38c7d47b5d8955b1b7.exe
Resource
win7-20240705-en
General
-
Target
b05d88312ce6028c63ae0f73f4930e77a6781a94d0456f38c7d47b5d8955b1b7
-
Size
124KB
-
MD5
906d593189c6825bcf9eeedca1322015
-
SHA1
8a74c226eb074910c3b22de9e11fca02d977569c
-
SHA256
b05d88312ce6028c63ae0f73f4930e77a6781a94d0456f38c7d47b5d8955b1b7
-
SHA512
6e638699366a30bf5c27fb7a2e048ad7c29f2f5a1b3d1b9481b0a43de8510914bbe0425bb949209f253c42fc0bab8dc178dff49484a249e7b6c59269d5fccd59
-
SSDEEP
1536:CTW7JJB7i2JalYNRfr44pWHlPEXZzjUq3th5f6utM5vLNinVmWvMu0b2UdpXk+ph:hc2Ja2WHIjN3tj6qnv0b2UrXkbvLs
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource b05d88312ce6028c63ae0f73f4930e77a6781a94d0456f38c7d47b5d8955b1b7 unpack001/out.upx
Files
-
b05d88312ce6028c63ae0f73f4930e77a6781a94d0456f38c7d47b5d8955b1b7.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ