General
-
Target
dd5bac722f406ad7de5931263ea52d207c793540a784d5c9f46f2ac3e6f82082N
-
Size
53KB
-
MD5
f3228b26e74c581fe7e5459cb00c9d10
-
SHA1
f173fa214c37c32913f0e17e657abfdce73a6b9e
-
SHA256
dd5bac722f406ad7de5931263ea52d207c793540a784d5c9f46f2ac3e6f82082
-
SHA512
79e5a41863dd86c49b136aeaddd2c8e3fddb50f4e0d9c9610b76198d0b64a978e1eb4bb049e258476bfea08f4e2db95110b2a28a4b9632cc7e4bbd61d5d70945
-
SSDEEP
1536:whEpAV+k1T2waTu7vkDZFH11V534Jy7L30GK:wsHk1Qu7v819Hw
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource dd5bac722f406ad7de5931263ea52d207c793540a784d5c9f46f2ac3e6f82082N unpack001/out.upx
Files
-
dd5bac722f406ad7de5931263ea52d207c793540a784d5c9f46f2ac3e6f82082N.exe windows:10 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 51KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:10 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 85KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ