Behavioral task
behavioral1
Sample
3830e8a505e3c184bc2d7f70413632b766992d376d8dcfc58ba903719f66002c.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
3830e8a505e3c184bc2d7f70413632b766992d376d8dcfc58ba903719f66002c.exe
Resource
win10v2004-20230703-en
General
-
Target
3830e8a505e3c184bc2d7f70413632b766992d376d8dcfc58ba903719f66002c
-
Size
2.0MB
-
MD5
1cb563178acac56b1bffbfa3a82aa13b
-
SHA1
05050f3ccfe5c85926872b42fb151a78b39471a4
-
SHA256
3830e8a505e3c184bc2d7f70413632b766992d376d8dcfc58ba903719f66002c
-
SHA512
4487abbe38f5cedf5fbd1b83b4ae1ba28fcde55fd9faf0befc80e4d51d4170ec96e511813c1f7a7d8570afc76412b5d4945efd7cc9c030c19f0b448e4ceff28d
-
SSDEEP
49152:1nsnvz7jUjNx3rD67AFSbFLz0YFRm3nbjgT1LOEN6rAjN9TRqURV6+mdRJjWdPxi:1s7HU73rD67AFShLzDF03nbjgT1LOENC
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 3830e8a505e3c184bc2d7f70413632b766992d376d8dcfc58ba903719f66002c unpack001/out.upx
Files
-
3830e8a505e3c184bc2d7f70413632b766992d376d8dcfc58ba903719f66002c.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 368KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 620KB - Virtual size: 618KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 96KB - Virtual size: 259KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ