Behavioral task
behavioral1
Sample
e36c9c6fc2ae73bbad51ccc8150ede86a9e86c843f4e21a9f39b48320e2eaeac.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
e36c9c6fc2ae73bbad51ccc8150ede86a9e86c843f4e21a9f39b48320e2eaeac.exe
Resource
win10v2004-20231222-en
General
-
Target
e36c9c6fc2ae73bbad51ccc8150ede86a9e86c843f4e21a9f39b48320e2eaeac
-
Size
4.9MB
-
MD5
1f5983c107def85d455e3576f595125a
-
SHA1
a8ccf6cf765777d8e435ca020ed53b3125e18014
-
SHA256
e36c9c6fc2ae73bbad51ccc8150ede86a9e86c843f4e21a9f39b48320e2eaeac
-
SHA512
4ea4197333410f8bbfcbdab778826ee4caa8f87e196c1616787ef64cde4f161beb21c63ff7c94513e516b25bdf692967f424c324fb7a46ca70dce4cb87e6395b
-
SSDEEP
98304:ynqYmrPz93PVnHhA89mIJua6akEyGvHG3pNKb1OG4U15J34eZpfnctSkq84AsgEN:ynWxDDGVIHGZAbxGsgf
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource e36c9c6fc2ae73bbad51ccc8150ede86a9e86c843f4e21a9f39b48320e2eaeac unpack001/out.upx
Files
-
e36c9c6fc2ae73bbad51ccc8150ede86a9e86c843f4e21a9f39b48320e2eaeac.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4.7MB - Virtual size: 4.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 282KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4.9MB - Virtual size: 4.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mtmd Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 284KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mtmd Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ