Behavioral task
behavioral1
Sample
abdfdcf2dc3c22bc961e3012b4c7f65ccd47c1735d5ee44e45f5f703ae525dc4.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
abdfdcf2dc3c22bc961e3012b4c7f65ccd47c1735d5ee44e45f5f703ae525dc4.exe
Resource
win10v2004-20241007-en
General
-
Target
abdfdcf2dc3c22bc961e3012b4c7f65ccd47c1735d5ee44e45f5f703ae525dc4
-
Size
90KB
-
MD5
65f51ffa00279fe1a7043e3a3cc405d5
-
SHA1
3fb226f5ba3cd1921a7e5b380c0e0c28cdaffe95
-
SHA256
abdfdcf2dc3c22bc961e3012b4c7f65ccd47c1735d5ee44e45f5f703ae525dc4
-
SHA512
e34670c0da788812733455ea3cc9fb68559fe0a27f3c9e2bb78f0aa9a95f54934a2dc561449f113c90a467f7a8c4b1f59ec1f88a4fb0aaa950a9a9548fa1ce44
-
SSDEEP
1536:UiYwjQt6QJvzZsgDIWzm/xsXfv+hYhyQQyV5uv4JBrB7w5VRGulTG1ZCL8nj1oDL:0wjZQJvzZsgsW6/Afv+hYfQIm4/rdE35
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource abdfdcf2dc3c22bc961e3012b4c7f65ccd47c1735d5ee44e45f5f703ae525dc4 unpack001/out.upx
Files
-
abdfdcf2dc3c22bc961e3012b4c7f65ccd47c1735d5ee44e45f5f703ae525dc4.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 236KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 86KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 292KB - Virtual size: 291KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ