Behavioral task
behavioral1
Sample
c5c61e72c31983b0fcdf886c8c8edd5d5bc606e0f6e9b97ec769769ff48b1d96.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c5c61e72c31983b0fcdf886c8c8edd5d5bc606e0f6e9b97ec769769ff48b1d96.exe
Resource
win10v2004-20240802-en
General
-
Target
c5c61e72c31983b0fcdf886c8c8edd5d5bc606e0f6e9b97ec769769ff48b1d96
-
Size
3.8MB
-
MD5
33228d75a1df1d22d2d521a998cc3c6e
-
SHA1
a95396f2c1dc2a8115916226a93fb2017e4d3959
-
SHA256
c5c61e72c31983b0fcdf886c8c8edd5d5bc606e0f6e9b97ec769769ff48b1d96
-
SHA512
b7fd16ac809d72000e166654d808f6aa75d52f917a0952aa98df2fb135bbe28fd14174a5447626f023b29b75ee42d1f7bb84f4b2836750523b26dec19606c589
-
SSDEEP
98304:R+CV0/lWn4FCHWZU5pHus9CBkvZcUf1ap0CwW:Rr6/44FpUOs9CBhQ1g0Cn
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource c5c61e72c31983b0fcdf886c8c8edd5d5bc606e0f6e9b97ec769769ff48b1d96 unpack001/out.upx
Files
-
c5c61e72c31983b0fcdf886c8c8edd5d5bc606e0f6e9b97ec769769ff48b1d96.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 784KB - Virtual size: 784KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 200KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 84KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ