Behavioral task
behavioral1
Sample
4fe5f6c7494ba05cc82b2394c093b937112819ca50f3142caaa1060fa06564b4.exe
Resource
win7-20240729-en
General
-
Target
4fe5f6c7494ba05cc82b2394c093b937112819ca50f3142caaa1060fa06564b4
-
Size
687KB
-
MD5
ec11ddc0d80288726dd9624acd6b2647
-
SHA1
3001c95f482455c65af1bbe7ac076f19089a0847
-
SHA256
4fe5f6c7494ba05cc82b2394c093b937112819ca50f3142caaa1060fa06564b4
-
SHA512
6c49cfbb9df51aee9100302372c6e76e5ee9e3131f02ed79e8c6e32b90804fe7fa3359c333b9cf01c0a138508ef91a90741c2708b8f13a01a0965ccf4d7cfceb
-
SSDEEP
12288:1aJWGEOgJ/Wzj4Vo+J8np2k/+VrgKS1fpHmTU75ZkzK/lX+JjJGhclVcGT9HD:1pGuWg2qoMkmVr1WpGI75ZpI1wGT9H
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 4fe5f6c7494ba05cc82b2394c093b937112819ca50f3142caaa1060fa06564b4 unpack001/out.upx
Files
-
4fe5f6c7494ba05cc82b2394c093b937112819ca50f3142caaa1060fa06564b4.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 666KB - Virtual size: 668KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 600KB - Virtual size: 599KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 104KB - Virtual size: 355KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ