Behavioral task
behavioral1
Sample
acf0762fe62369d069960846e31fb94f3eee30b14260503c0af44d8b60c515ac.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
acf0762fe62369d069960846e31fb94f3eee30b14260503c0af44d8b60c515ac.exe
Resource
win10v2004-20240802-en
General
-
Target
acf0762fe62369d069960846e31fb94f3eee30b14260503c0af44d8b60c515ac
-
Size
85KB
-
MD5
99b8b4ab2dbf49d248a00e9f42efce4c
-
SHA1
f07f7d56b081011f3673771363b6a582a4420949
-
SHA256
acf0762fe62369d069960846e31fb94f3eee30b14260503c0af44d8b60c515ac
-
SHA512
c3de1bdb9646489f94137d4a0eeca3805eb1350dd1dcf4967a500f7944a3f9822f3e727a745f7706d6cc7d337e5484dde84b7f85c3d3597f8fd6e654b1c72ea7
-
SSDEEP
768:kBT37CPKKdJJ1EXBwzEXBwdcMcwBcCBcw/tio/tieiaBT37CPKKdJJ1EXBwzEXBZ:CTW7JJ7TTQoQUTW7JJ7TTQoQnXN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource acf0762fe62369d069960846e31fb94f3eee30b14260503c0af44d8b60c515ac unpack001/out.upx
Files
-
acf0762fe62369d069960846e31fb94f3eee30b14260503c0af44d8b60c515ac.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ