Behavioral task
behavioral1
Sample
13cb4d8235b1f3b3084459510e6e8ef83473b83fce37750547180e2b0d690610N.exe
Resource
win7-20240903-en
General
-
Target
13cb4d8235b1f3b3084459510e6e8ef83473b83fce37750547180e2b0d690610N
-
Size
70KB
-
MD5
53bee589f2fdb01e3d572c94cf0ab330
-
SHA1
70a269716c0e8f40419fd578c854ed5bdcac5968
-
SHA256
13cb4d8235b1f3b3084459510e6e8ef83473b83fce37750547180e2b0d690610
-
SHA512
08b8cb1e9831803df9c840cef7fab1fe58d060322d9ca5316fda74782e0155d9b282d1e9d28b1e0e083f12c31beef4b77d877f2f44693b9721dc6cd07cc2ea26
-
SSDEEP
1536:CTWn1++PJHJXA/OsIZfzc3/Q8zxY5eYAWuSP+:KQSox5tW
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 13cb4d8235b1f3b3084459510e6e8ef83473b83fce37750547180e2b0d690610N unpack001/out.upx
Files
-
13cb4d8235b1f3b3084459510e6e8ef83473b83fce37750547180e2b0d690610N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ