Behavioral task
behavioral1
Sample
8723a99033376fe93622c7af6b7a9570cf489054c5a825aaa7786355a850b6f0.exe
Resource
win7-20240708-en
General
-
Target
8723a99033376fe93622c7af6b7a9570cf489054c5a825aaa7786355a850b6f0
-
Size
5.0MB
-
MD5
34e3e5ed80ead429da4341297707d8e3
-
SHA1
4895e8cbb895ca92a6d3cf53922a3bdeaeb2a99d
-
SHA256
8723a99033376fe93622c7af6b7a9570cf489054c5a825aaa7786355a850b6f0
-
SHA512
9feea2b54b3edcbcfde63281ad72d32dfbc633a7c5c76eab41a88ed9ccf841aeb664fb04ce6354d0fc507482bd1a29aa086e7b8f224b452f2dec7325caff495f
-
SSDEEP
98304:YkiMRrjbwYCJ2zUUAPICGAJugh6c09Qpyqkm9vP01k7vy3:zHtC1Ki5zrBvPY
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 8723a99033376fe93622c7af6b7a9570cf489054c5a825aaa7786355a850b6f0 unpack001/out.upx
Files
-
8723a99033376fe93622c7af6b7a9570cf489054c5a825aaa7786355a850b6f0.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 280KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 146KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 133KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 167KB - Virtual size: 166KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 63KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 25KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ