Behavioral task
behavioral1
Sample
84a988a411f32a222176881d5e78a73e6183542fd7be974b5c0d0fd36ee98edb.exe
Resource
win7-20240705-en
General
-
Target
84a988a411f32a222176881d5e78a73e6183542fd7be974b5c0d0fd36ee98edb
-
Size
328KB
-
MD5
f7d2e0e10e6eb32131fc7c140cdcec2a
-
SHA1
796a35b3c9d99f090696980544bf9cdb5116bd9d
-
SHA256
84a988a411f32a222176881d5e78a73e6183542fd7be974b5c0d0fd36ee98edb
-
SHA512
5eac77aa3ddf53626724c9d0e6b1f55a3914f8d727048fc4299db1e4f76a48e9ecc2300c0468c29c5cb99b0366a5658543902d021c13be4b2e3825fdcf6175e8
-
SSDEEP
6144:Rs+X3APLpuTiZ0JUpPOEfN68Ah3b7Hx3fspRFW5mIBxCe4vL6kr:R7XQPLpsdqBBfM8EdyW5mIGe4j6a
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 84a988a411f32a222176881d5e78a73e6183542fd7be974b5c0d0fd36ee98edb unpack001/out.upx
Files
-
84a988a411f32a222176881d5e78a73e6183542fd7be974b5c0d0fd36ee98edb.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 728KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 324KB - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 605KB - Virtual size: 604KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 168KB - Virtual size: 167KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 41KB - Virtual size: 203KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 53KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ