Behavioral task
behavioral1
Sample
acfd1bfd1cb1bff944f8354fc3c5ecf31da286eae2caecc076daaf8055279b37N.exe
Resource
win7-20240903-en
General
-
Target
acfd1bfd1cb1bff944f8354fc3c5ecf31da286eae2caecc076daaf8055279b37N
-
Size
118KB
-
MD5
17454abc8673dc0c150922da1f449690
-
SHA1
7b02f72ceb229c7ef7c375170b2ba7cff9d530e2
-
SHA256
acfd1bfd1cb1bff944f8354fc3c5ecf31da286eae2caecc076daaf8055279b37
-
SHA512
f666c13f6e4fdecd1b7e97fa3164b00a281d5daf35c766db70c5706400c29f8d1efc734cb0c8d46c616834ce8ce42a5a1e3e5b83f13663b4d1987415173effcb
-
SSDEEP
1536:CTWn1++PJHJXA/OsIZfzc3/Q8zxY5KwcfV:KQSox5KwcN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource acfd1bfd1cb1bff944f8354fc3c5ecf31da286eae2caecc076daaf8055279b37N unpack001/out.upx
Files
-
acfd1bfd1cb1bff944f8354fc3c5ecf31da286eae2caecc076daaf8055279b37N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ