Behavioral task
behavioral1
Sample
7f1875dd008a66d09ea546c33320919e85c091de535205ba3d2c9b3c3cefb94fN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
7f1875dd008a66d09ea546c33320919e85c091de535205ba3d2c9b3c3cefb94fN.exe
Resource
win10v2004-20241007-en
General
-
Target
7f1875dd008a66d09ea546c33320919e85c091de535205ba3d2c9b3c3cefb94fN
-
Size
123KB
-
MD5
259d94666b51892d7946e4b3827cb030
-
SHA1
b89996a1c55f293e6063115325d2c2555c714532
-
SHA256
7f1875dd008a66d09ea546c33320919e85c091de535205ba3d2c9b3c3cefb94f
-
SHA512
d07f2bac9fa53774189b7295cb7bd401eb4d7cb740cf6353a31945eaf596e9ec65213b2bef8f99304da01e7fb45da227d9a314c0c1fc3a0cb174d3d286b6fc89
-
SSDEEP
3072:JN3BXNNIvA0XWp1IcKAArDZz4N9GhbkCNETDg:pXNlpyyN90xE
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 7f1875dd008a66d09ea546c33320919e85c091de535205ba3d2c9b3c3cefb94fN unpack001/out.upx
Files
-
7f1875dd008a66d09ea546c33320919e85c091de535205ba3d2c9b3c3cefb94fN.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 148KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 90KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 43KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 111KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ