Behavioral task
behavioral1
Sample
b09207dbe6c86a35c689ccb4585113c0N.exe
Resource
win7-20240704-en
General
-
Target
b09207dbe6c86a35c689ccb4585113c0N.exe
-
Size
182KB
-
MD5
b09207dbe6c86a35c689ccb4585113c0
-
SHA1
389f5ed7df02966fc3921afbfb2c960096c2f79d
-
SHA256
e9c38bb65bc254f884113cc1995189168054d457b25891510029fcd7d31a711e
-
SHA512
5bfab3e701f15333e8eecb4201e020cae82536b709685de46702fda2511a0ae4a7ac3b0363c03147b9685f3a29954654f5806bb338d0d747eb04ab7a91be28e9
-
SSDEEP
3072:hc2JaP9iMGfUSaOy9SnJUwFU+FUhFUeFUXFUqyqKCFXwn:K2JaP9iMGsSaOyR
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource b09207dbe6c86a35c689ccb4585113c0N.exe unpack001/out.upx
Files
-
b09207dbe6c86a35c689ccb4585113c0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ