Behavioral task
behavioral1
Sample
2ddaa4b41d08c78b515bf824769db7915c9a1a9206aede148aaa0e3830f30e5e.exe
Resource
win7-20240708-en
General
-
Target
2ddaa4b41d08c78b515bf824769db7915c9a1a9206aede148aaa0e3830f30e5e
-
Size
890KB
-
MD5
ade309eeab3fdb94c925a1531413eed5
-
SHA1
8f69cabb5a41bfa340006b74d35661c2b73894f2
-
SHA256
2ddaa4b41d08c78b515bf824769db7915c9a1a9206aede148aaa0e3830f30e5e
-
SHA512
13ab772dda37e591bd281db2601b9fcfc9684991d5be74d27ed8ed99f0064b8569ca2104a216a54cba3a4b64bae2a98dda51d24857a18329234c52b3b854c560
-
SSDEEP
12288:r+Vw8UBnZzlSIEBc1btwfOh+pTMYPDA2WeaUY5dn70AsjdptVFFr:afY50I+DzKU8TMbTF
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 2ddaa4b41d08c78b515bf824769db7915c9a1a9206aede148aaa0e3830f30e5e unpack001/out.upx
Files
-
2ddaa4b41d08c78b515bf824769db7915c9a1a9206aede148aaa0e3830f30e5e.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 622KB - Virtual size: 624KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 267KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 591KB - Virtual size: 590KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 107KB - Virtual size: 106KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ