Behavioral task
behavioral1
Sample
3ec363190c9645654572ba2c52ffc36b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3ec363190c9645654572ba2c52ffc36b.exe
Resource
win10v2004-20231215-en
General
-
Target
3ec363190c9645654572ba2c52ffc36b
-
Size
157KB
-
MD5
3ec363190c9645654572ba2c52ffc36b
-
SHA1
4f0e5fd0d2e225fdd024e3f5888d3957e068727a
-
SHA256
e096a9719daf9f4c3079badc294e2d4a24860f995bd83861586e0d1ce7e36153
-
SHA512
e8309cd288625b46b69ab0ac01d8a608f3dce4c80eea53f68f8235a48ace2c95b679cc12ec2c1f431850f03c326e83754209adabd26e79b124cb0164f3cfba04
-
SSDEEP
3072:x4JYZEdXq93e1HGhxY4DMfZLdh9zjP6GlZz0LVRTyfZU7WBz:xx73BxVDMfZpjF6VRefZU7WB
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 3ec363190c9645654572ba2c52ffc36b unpack001/out.upx
Files
-
3ec363190c9645654572ba2c52ffc36b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 140KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.tyfeo Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ammco Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xccm Size: 82KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.jmicfb Size: 1024B - Virtual size: 990B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.frxi Size: 75KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.krvjhix Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ