Behavioral task
behavioral1
Sample
fea52b9151f839a504eccd3bcda36b3fd1a5e1dc1cdd3ff94bc9702f9005c580N.exe
Resource
win7-20240708-en
General
-
Target
fea52b9151f839a504eccd3bcda36b3fd1a5e1dc1cdd3ff94bc9702f9005c580N
-
Size
54KB
-
MD5
72250197e6629f4244918ecebb16a960
-
SHA1
c01c5ce534745380df345ae4e508d0c826aa701e
-
SHA256
fea52b9151f839a504eccd3bcda36b3fd1a5e1dc1cdd3ff94bc9702f9005c580
-
SHA512
d7a930996eb0cfb07418dc2fc2bf35ba63f05cac6e78d3d6efb5b6e00f4efd5aec77ff009a20519140e82e1838372baa623450d31a2fe1bfd280cc25bd50947e
-
SSDEEP
1536:qVNKIUNb6KnHhJjJVAnQGtLsUEu5bc3TfaCQ0wNbLr:0cIUND1VivrmpSD
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource fea52b9151f839a504eccd3bcda36b3fd1a5e1dc1cdd3ff94bc9702f9005c580N unpack001/out.upx
Files
-
fea52b9151f839a504eccd3bcda36b3fd1a5e1dc1cdd3ff94bc9702f9005c580N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ