Behavioral task
behavioral1
Sample
7b6d25a6cc50bd8058ec2d36ffb64acb462f975ee929f9fa428aff04a519654e.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
7b6d25a6cc50bd8058ec2d36ffb64acb462f975ee929f9fa428aff04a519654e.exe
Resource
win10v2004-20240802-en
General
-
Target
7b6d25a6cc50bd8058ec2d36ffb64acb462f975ee929f9fa428aff04a519654e
-
Size
39KB
-
MD5
9c700f0ed717ac0136c0318f876fd7c9
-
SHA1
4392eac1f6f2496648bf21b95abd3e232e2c22c3
-
SHA256
7b6d25a6cc50bd8058ec2d36ffb64acb462f975ee929f9fa428aff04a519654e
-
SHA512
35c43e49bdcf33d901861d5b4198eec1107266f395afafa4995a590d617720527aae298f09da55c87fd57aa95c193d664e0fac49a540ec9e7d9fa47de16a38c5
-
SSDEEP
768:kBT37CPKKdJJ1EXBwzEXBwdcMcI9Hx3R9pi1xOR9pi1xHBd:CTW7JJ7Th9ko9kf
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 7b6d25a6cc50bd8058ec2d36ffb64acb462f975ee929f9fa428aff04a519654e unpack001/out.upx
Files
-
7b6d25a6cc50bd8058ec2d36ffb64acb462f975ee929f9fa428aff04a519654e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ