Behavioral task
behavioral1
Sample
123e08672bed425ae5fbd7bb9f463bc308a5078ccb114c73091793c8f183aae9.exe
Resource
win7-20240903-en
General
-
Target
123e08672bed425ae5fbd7bb9f463bc308a5078ccb114c73091793c8f183aae9
-
Size
1.9MB
-
MD5
d89921bf900078caa449e6f3aac82148
-
SHA1
90c2a7a2832290a86e9c3b10776865ee87969e44
-
SHA256
123e08672bed425ae5fbd7bb9f463bc308a5078ccb114c73091793c8f183aae9
-
SHA512
e37f1d255b19854caa7a7dff7558e8e026aa8dd3b4aa6209b991e135c28ecfa4d9ef02882a839c5a36337cd7d935ecdf7dcca2877e5f8f201ac2bc31da87adff
-
SSDEEP
49152:Vgb6yrmkf6Z6UZvBXONIV18/U71hJjXEgbsZvwejhW:OAZ6UZvB1sU71hxX3sIejs
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 123e08672bed425ae5fbd7bb9f463bc308a5078ccb114c73091793c8f183aae9 unpack001/out.upx
Files
-
123e08672bed425ae5fbd7bb9f463bc308a5078ccb114c73091793c8f183aae9.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 103KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 112KB - Virtual size: 389KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 124KB - Virtual size: 123KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ