Behavioral task
behavioral1
Sample
bf002317f928fef98c3cf321c4edefbfe1cdb352f35b4cb11fbc3e82b31b1891.exe
Resource
win7-20240903-en
General
-
Target
bf002317f928fef98c3cf321c4edefbfe1cdb352f35b4cb11fbc3e82b31b1891
-
Size
1.3MB
-
MD5
57e91c732920424eae7f1ed5b796bd1f
-
SHA1
b52cacf9ebf858d4273d82f5428d3af76c578128
-
SHA256
bf002317f928fef98c3cf321c4edefbfe1cdb352f35b4cb11fbc3e82b31b1891
-
SHA512
e579f67712553826fe243f49c3be3559f156ea5ded99c44183d4d7d38e0af81163a00c4831848ff300cffb2832584ddd4570f46e79870c880941638859d4e988
-
SSDEEP
24576:Vj3eycJdq4NXJGK6KPanZhTHetfW41MMTjZn73T6ofhXrc5266BH6cQqqsAXwQ:VjuySd/NXJN6ianZlqxfhX+kacpA
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource bf002317f928fef98c3cf321c4edefbfe1cdb352f35b4cb11fbc3e82b31b1891 unpack001/out.upx
Files
-
bf002317f928fef98c3cf321c4edefbfe1cdb352f35b4cb11fbc3e82b31b1891.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 5.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3.8MB - Virtual size: 3.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 124KB - Virtual size: 496KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ