Behavioral task
behavioral1
Sample
bc72689eaeb2052f3773dea05ab04eabba48b977fe46647f17bafe7c3259f8d6.exe
Resource
win7-20240903-en
General
-
Target
bc72689eaeb2052f3773dea05ab04eabba48b977fe46647f17bafe7c3259f8d6
-
Size
7.6MB
-
MD5
1f99474b452ec8e846fa1eac3c6f997b
-
SHA1
5f059ade6503bf9487d72c86d4f3fc30e99f4bee
-
SHA256
bc72689eaeb2052f3773dea05ab04eabba48b977fe46647f17bafe7c3259f8d6
-
SHA512
b4265045316bb1b4b29dfe0f7a8fa7edac314949b7c1c82622bc0537807f85f9deb15ded94f0d49e55404ec8966a004778ee7a7264ed0e32c4308ef7118c6ed3
-
SSDEEP
196608:WPeZ5TgtO7kK0uzdARWeX0LEmYYHicqGqXr+Q9Glx9HT:WMIokKddAUekLBCWW
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource bc72689eaeb2052f3773dea05ab04eabba48b977fe46647f17bafe7c3259f8d6 unpack001/out.upx
Files
-
bc72689eaeb2052f3773dea05ab04eabba48b977fe46647f17bafe7c3259f8d6.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 4.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 7.5MB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 666KB - Virtual size: 666KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 128KB - Virtual size: 127KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 19KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11.3MB - Virtual size: 11.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ