Behavioral task
behavioral1
Sample
92a571a6462bc798ebb59ecbdb9f8f58c1939d2838f2b77eba37a6b5f41bff10N.exe
Resource
win7-20240903-en
General
-
Target
92a571a6462bc798ebb59ecbdb9f8f58c1939d2838f2b77eba37a6b5f41bff10N
-
Size
52KB
-
MD5
d0735736fcb9902c1df1f6c220b1ee10
-
SHA1
b0e356aad2667ff1ca6aa6b631501135011efaeb
-
SHA256
92a571a6462bc798ebb59ecbdb9f8f58c1939d2838f2b77eba37a6b5f41bff10
-
SHA512
4248e5f0076128cb19a5f090e6b26b3b892f14a4c0ac38be127103a65e18eec32512c2e234df0d731caa59a8607a5078e229529f68f8bfecd8c82eec1c4ba421
-
SSDEEP
768:kBT37CPKKdJJ1EXBwzEXBwdcMcI9lVF0m2XsLEmq9ex+PEfa9NlN78iwC9m50qRQ:CTW7JJ7TXjLoQwPEfa9rba1RYj7FKcie
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 92a571a6462bc798ebb59ecbdb9f8f58c1939d2838f2b77eba37a6b5f41bff10N unpack001/out.upx
Files
-
92a571a6462bc798ebb59ecbdb9f8f58c1939d2838f2b77eba37a6b5f41bff10N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ