Behavioral task
behavioral1
Sample
ccd63d04ae7279ce724cb701aad2da00N.exe
Resource
win7-20240708-en
General
-
Target
ccd63d04ae7279ce724cb701aad2da00N.exe
-
Size
85KB
-
MD5
ccd63d04ae7279ce724cb701aad2da00
-
SHA1
d99160ff38732ecb3a5f2d5b174dcb3ec43c7cb3
-
SHA256
75a2bf1e994af32134d6725bb6b8ce044f83d17d7f6ac9b8d1dc460c45db0b31
-
SHA512
d2226f514a7eb307b2ab43b511492d6cc273ce1ec7f871eb6addecb4332d9f6e4cec68257d14904d74b0a1542c9f94b87339919b4e3994f587e46884da523361
-
SSDEEP
1536:CTWn1++PJHJXA/OsIZfzc3/Q8IZTkb/b8QMJZaK96:KQSo7Zgr4QMmK96
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource ccd63d04ae7279ce724cb701aad2da00N.exe unpack001/out.upx
Files
-
ccd63d04ae7279ce724cb701aad2da00N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ