Behavioral task
behavioral1
Sample
3c76d5aa8de1b32addf4299acb170e3d.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
3c76d5aa8de1b32addf4299acb170e3d.exe
Resource
win10v2004-20231215-en
General
-
Target
3c76d5aa8de1b32addf4299acb170e3d
-
Size
13.0MB
-
MD5
3c76d5aa8de1b32addf4299acb170e3d
-
SHA1
a5a172dccbe1fbb50ef8afb7a4edfe9531138df3
-
SHA256
0e32b2bbd0347fc8b4eae683f22b1d34f2c5514ae863c32fe2fc32089219a70b
-
SHA512
b6fa9e3a6316b3e1ae51d33b51e8b58e7b6f33ee49b6153c2a8d2a45634c404570860a4e9337c72d341df9f6a8a22364408ab2e3bf66a6655ffdeb921683a551
-
SSDEEP
24576:BYQkpx/ORHsD000000000000000000000000000000000000000000000000000M:CQm/rR
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 3c76d5aa8de1b32addf4299acb170e3d unpack001/out.upx
Files
-
3c76d5aa8de1b32addf4299acb170e3d.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 67.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 239KB - Virtual size: 240KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12.8MB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 220KB - Virtual size: 219KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 70KB - Virtual size: 66.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gariya Size: 512B - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 924KB - Virtual size: 923KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ