Behavioral task
behavioral1
Sample
1faf400aba397f1cfec8cf38ec80c9612c062bd3586b5455db3677cab56666ee.exe
Resource
win7-20240903-en
General
-
Target
1faf400aba397f1cfec8cf38ec80c9612c062bd3586b5455db3677cab56666ee
-
Size
1.4MB
-
MD5
08c777fd8ccca45ace19828085793301
-
SHA1
4833feb6164c935ce47a9b0e6c19dcb247dc84c4
-
SHA256
1faf400aba397f1cfec8cf38ec80c9612c062bd3586b5455db3677cab56666ee
-
SHA512
f952afa168c74ab36e1b0b558dc12c4a198036c421e22be493fe5125f5eb578e7cd0f72f78c0925fe58d6a611c55dbe96ab124d376b1d80ddf2ceaf21f46c577
-
SSDEEP
24576:1rlRo1S05mTkynlyWD4cSXGPOPAe+ef2ESzOt6oldG2E0JxPKz0smtBVvXpv7Y7:1jocTkEfvSXGPOoJef2fz41ldm0JxsmE
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 1faf400aba397f1cfec8cf38ec80c9612c062bd3586b5455db3677cab56666ee unpack001/out.upx
Files
-
1faf400aba397f1cfec8cf38ec80c9612c062bd3586b5455db3677cab56666ee.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 924KB - Virtual size: 921KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 104KB - Virtual size: 383KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ