Behavioral task
behavioral1
Sample
bc4e1415f7b76fea2672727cf32a0d33c7b8cb5ab4f25c6b554b1aff90091bf3.exe
Resource
win7-20240903-en
General
-
Target
bc4e1415f7b76fea2672727cf32a0d33c7b8cb5ab4f25c6b554b1aff90091bf3
-
Size
4.9MB
-
MD5
4195247b507e71d85e0118542d201f24
-
SHA1
5e854691bea63dbd6fca3db43d608a77cb21d9f7
-
SHA256
bc4e1415f7b76fea2672727cf32a0d33c7b8cb5ab4f25c6b554b1aff90091bf3
-
SHA512
7acc995ab17a30090cb1d962ffaa80e41156c45ec6cb53e42dc68cd1ebbdf8afa116314e82a142b4f0afa4a3e1a3b83c586d31dc7dd064fa1dd270180cdd31d0
-
SSDEEP
98304:18fcpkQyBf1OrbdZVkFz1DtD4p5g0Du7QLXbW0BscN/oDA6oJVvkrOJRizpsRNLg:18UpA9Orboypa0Se4E6oorOJRiUWLEbf
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource bc4e1415f7b76fea2672727cf32a0d33c7b8cb5ab4f25c6b554b1aff90091bf3 unpack001/out.upx
Files
-
bc4e1415f7b76fea2672727cf32a0d33c7b8cb5ab4f25c6b554b1aff90091bf3.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4.6MB - Virtual size: 4.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 299KB - Virtual size: 300KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4.9MB - Virtual size: 4.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ