Behavioral task
behavioral1
Sample
f85d3c0048d98c83aa18b66e100d25aac9c2d5bd1e2963a8a8944c3a4699bbd5N.exe
Resource
win7-20240903-en
General
-
Target
f85d3c0048d98c83aa18b66e100d25aac9c2d5bd1e2963a8a8944c3a4699bbd5N.exe
-
Size
101KB
-
MD5
cf3286ab234e1a9b3f681ab875843c50
-
SHA1
191b9ab0053a63d29b8854176d14dc0e8678d1a2
-
SHA256
f85d3c0048d98c83aa18b66e100d25aac9c2d5bd1e2963a8a8944c3a4699bbd5
-
SHA512
21558ae346086a32b620ecd9274d9a8bfc31794568a1ef55e19b2cda7d9fb5f69a76478c279224074d69b5f0680537425695192e1d562165b2234c8e48706480
-
SSDEEP
3072:KQSodYeHNmkDxfIyKoIWbsHfySkT5GeCyi348oWGRPOzkjId6q8UdrSD+kCoIfLC:KQSodYeHNmezDrp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource f85d3c0048d98c83aa18b66e100d25aac9c2d5bd1e2963a8a8944c3a4699bbd5N.exe unpack001/out.upx
Files
-
f85d3c0048d98c83aa18b66e100d25aac9c2d5bd1e2963a8a8944c3a4699bbd5N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ