Behavioral task
behavioral1
Sample
41dcf30b929ea693d5380b3fd9b13dc0e54c5b8ad95374381cb618b9b01f3bfc.exe
Resource
win10v2004-20230703-en
General
-
Target
41dcf30b929ea693d5380b3fd9b13dc0e54c5b8ad95374381cb618b9b01f3bfc
-
Size
266KB
-
MD5
8d814b401bd447919557b1a90598a98f
-
SHA1
5adb803198ea1b9e8bc217b07ca5da623db09dec
-
SHA256
41dcf30b929ea693d5380b3fd9b13dc0e54c5b8ad95374381cb618b9b01f3bfc
-
SHA512
e1dd02b04424b18169a90bdc20e1e7464580c2a9f89b89e182db9610e85b802560717cdd07f3eec61404ebd2bc79fe019d36816e8c82d070c9cd6d6868c20296
-
SSDEEP
6144:NXzKdNY49u8rVtsvIGUxifVEoSErE01net:ua4A8oIL+V801
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 41dcf30b929ea693d5380b3fd9b13dc0e54c5b8ad95374381cb618b9b01f3bfc unpack001/out.upx
Files
-
41dcf30b929ea693d5380b3fd9b13dc0e54c5b8ad95374381cb618b9b01f3bfc.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 368KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 163KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 101KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 114KB - Virtual size: 113KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 327KB - Virtual size: 326KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ