Behavioral task
behavioral1
Sample
d461f3431ef0b52730c61d19e0742622fdeac836d58e86f25707e1d97015adbf.exe
Resource
win10v2004-20230824-en
General
-
Target
d461f3431ef0b52730c61d19e0742622fdeac836d58e86f25707e1d97015adbf
-
Size
266KB
-
MD5
e29fc157670e98125e4e6e871d6f88e3
-
SHA1
7c802adc15b3320e2d1dff988f227f2c46e5822f
-
SHA256
d461f3431ef0b52730c61d19e0742622fdeac836d58e86f25707e1d97015adbf
-
SHA512
de851c20501ffd1ef653c10af7a6057afdecd56e8d68fa080a8f102e424d902ba3f083650a1c31a16a4feb1479a29a4d149f4bea03bae0f4e6204a5551545789
-
SSDEEP
6144:eXzKdNY49u8rVq0CxifVEoSErOf01net:la4A/9+Vg01
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource d461f3431ef0b52730c61d19e0742622fdeac836d58e86f25707e1d97015adbf unpack001/out.upx
Files
-
d461f3431ef0b52730c61d19e0742622fdeac836d58e86f25707e1d97015adbf.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 368KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 163KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 101KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 114KB - Virtual size: 113KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 327KB - Virtual size: 326KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ