Behavioral task
behavioral1
Sample
baeba9ee19e14c86c327cd122afb4db37fa14d689fe3475a3468469c43367a5b.exe
Resource
win7-20240903-en
General
-
Target
baeba9ee19e14c86c327cd122afb4db37fa14d689fe3475a3468469c43367a5b
-
Size
1.3MB
-
MD5
38e3be121bbb8bce3b2e6225e3007840
-
SHA1
7621b243b587e67519028e75d49f0bb2ef9da480
-
SHA256
baeba9ee19e14c86c327cd122afb4db37fa14d689fe3475a3468469c43367a5b
-
SHA512
2f0f381738817287a4af192f0c582d75cfa26ce5d843060277ae0e79d44f324ff52d15d6dd72b386ecf46d1003076e3e1f5d8eb73fa03557c9bd387df392f777
-
SSDEEP
24576:IAhxwMPxMpL7FO5uHn1j0gvDpuXPrP5s49jfctR3q/fnLFJ9j8xEO:I62MPGpLB51wyDpuXPls49qR3q/zqxE
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource baeba9ee19e14c86c327cd122afb4db37fa14d689fe3475a3468469c43367a5b unpack001/out.upx
Files
-
baeba9ee19e14c86c327cd122afb4db37fa14d689fe3475a3468469c43367a5b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 5.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3.7MB - Virtual size: 3.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 124KB - Virtual size: 496KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ