Behavioral task
behavioral1
Sample
340a78d6620cbc376a551fe4ca15fd9786507ca64ba73813414fc126c806694d.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
340a78d6620cbc376a551fe4ca15fd9786507ca64ba73813414fc126c806694d.exe
Resource
win10v2004-20230915-en
General
-
Target
340a78d6620cbc376a551fe4ca15fd9786507ca64ba73813414fc126c806694d
-
Size
350KB
-
MD5
687ac28596b56ecb4424378d967e7e9d
-
SHA1
e1e458eba4083dac0c3fcdd9263d4f29526038aa
-
SHA256
340a78d6620cbc376a551fe4ca15fd9786507ca64ba73813414fc126c806694d
-
SHA512
61f872ae8f3087aa159f2f4f73205321adcc539a2d0b5903cddefac65c039f49cc4d897087d526b01a5ac1a8da11ce59f0268663951f074e986c9ee5957a004c
-
SSDEEP
6144:dXjKt8hdWu7xOi3ztoZ/AuSrkY/pD2e/fsYXusKSoihZdiPTl5Lv:5KarWu7dK/qH7gB0iPTl
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 340a78d6620cbc376a551fe4ca15fd9786507ca64ba73813414fc126c806694d unpack001/out.upx
Files
-
340a78d6620cbc376a551fe4ca15fd9786507ca64ba73813414fc126c806694d.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 6.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 344KB - Virtual size: 344KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 806KB - Virtual size: 805KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 152KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 5.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.detourd Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.detourc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 70KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ