Behavioral task
behavioral1
Sample
dfc9f4fa63419de33cd49f30af062fb71131523465580dfa50f6961df82dc741N.exe
Resource
win7-20240903-en
General
-
Target
dfc9f4fa63419de33cd49f30af062fb71131523465580dfa50f6961df82dc741N
-
Size
59KB
-
MD5
ab1354d404db42847ba21c324060bd70
-
SHA1
36de985fbfc3a026cca92bf4a223c77abd756e78
-
SHA256
dfc9f4fa63419de33cd49f30af062fb71131523465580dfa50f6961df82dc741
-
SHA512
92e6c19aaae409d534f23f4a3bea6925f4bc1140bc8f1abfdb77dfe4f3e3e9881c196fe0b5f3f23c7a2b74d953e1aee12847db23fab7b4576ce97be9f4ef423b
-
SSDEEP
768:kBT37CPKKdJJcbQbf1Oti1JGBQOOiQJhATBApwp133EskmKsN33EskmKs0No6HZD:CTW7JJZENTBAOIfmKJfmKjNoY/7cueWv
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource dfc9f4fa63419de33cd49f30af062fb71131523465580dfa50f6961df82dc741N unpack001/out.upx
Files
-
dfc9f4fa63419de33cd49f30af062fb71131523465580dfa50f6961df82dc741N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ