Behavioral task
behavioral1
Sample
197a9a0851d89045f85dceaabdc3f6b2152333707dc90b4ee9f3041e1a401019N.exe
Resource
win7-20240903-en
General
-
Target
197a9a0851d89045f85dceaabdc3f6b2152333707dc90b4ee9f3041e1a401019N
-
Size
10KB
-
MD5
5f36e4f439a87fdd4579a981a04ca000
-
SHA1
8b4e806e49b7ebb9558e3baa672899590678a864
-
SHA256
197a9a0851d89045f85dceaabdc3f6b2152333707dc90b4ee9f3041e1a401019
-
SHA512
91f359fcabb179f61a64f3cafe76990fdf4050fc2204246145e4c4bf3a279f7724ff1119928f5dde53c1ad6cc7d47ffc561d9333cf6ef3560a91081a15649cec
-
SSDEEP
192:dnFAW37fGF3/gvNnwLo+NnkE0v6MrdOlvf3T+KDab:dWWmiNWnkXv6MMCKDS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 197a9a0851d89045f85dceaabdc3f6b2152333707dc90b4ee9f3041e1a401019N unpack001/out.upx
Files
-
197a9a0851d89045f85dceaabdc3f6b2152333707dc90b4ee9f3041e1a401019N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ