Behavioral task
behavioral1
Sample
5400a9599b9d65c0a6abbaaa571c5ab13f20e9354e0bfe4408aaa584993bc681.exe
Resource
win7-20240903-en
General
-
Target
5400a9599b9d65c0a6abbaaa571c5ab13f20e9354e0bfe4408aaa584993bc681
-
Size
596KB
-
MD5
3c64d21fe9547e35b0cf3f7e090974eb
-
SHA1
05c610a455ec97911c92f2ebbe1b90b37fd9815c
-
SHA256
5400a9599b9d65c0a6abbaaa571c5ab13f20e9354e0bfe4408aaa584993bc681
-
SHA512
66210fab18d2bea1ff3cefc4b702cbad1c27a4a9ad5c78aa43aba63ba7644394117700c32ee8fe2f5bf53514b7d9d43bcf9e0f869fd2708c89ee1f82bfeb0440
-
SSDEEP
12288:tIBOFG681hbfNbcUFc3Noxt1HuXwi1XMNiECKh8uD8zPGYnfWmv:uBOFGZmUFXzhuXDHQN8z+Yn
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 5400a9599b9d65c0a6abbaaa571c5ab13f20e9354e0bfe4408aaa584993bc681 unpack001/out.upx
Files
-
5400a9599b9d65c0a6abbaaa571c5ab13f20e9354e0bfe4408aaa584993bc681.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 565KB - Virtual size: 568KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 656KB - Virtual size: 654KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 988KB - Virtual size: 987KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 96KB - Virtual size: 285KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ