Behavioral task
behavioral1
Sample
namp.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
namp.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
namp.exe
Resource
ubuntu2004-amd64-20240221-en
General
-
Target
namp.exe
-
Size
30.4MB
-
MD5
eb7144635b859e5faacd45f83cce5227
-
SHA1
b9cd1635d4af6f0c2c9a8f7a6186a147300aaf34
-
SHA256
3bf10df2e24714c2a6fe552a1347b8039ba1f09714cb6bde0ee4276c4f70e165
-
SHA512
2b840f3c73b81e1d033ce1448c372151e956d71f6fc4d8f723bf62f20866472162dabdc79fb90152aa26caa40c88680fe1294ac440d2aa0b46ad09659dae3a01
-
SSDEEP
393216:IGXn4pGQysIndPMYGBD02OGrZMIoiajSJGgxWK3bgD6JJFUWq9TKQD1nTJ9b:h2bIdUN0fwZHJGgxWK3bgD6f5qkORJ9b
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource namp.exe
Files
-
namp.exe.exe windows:6 windows x64 arch:x64
d1c1dbbd3f23a12ffe26914c72391cde
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
GetVersionExW
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
GetWindowTextA
CharUpperBuffW
advapi32
CryptReleaseContext
Sections
.text Size: 830KB - Virtual size: 830KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 231KB - Virtual size: 230KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 777KB - Virtual size: 790KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 148B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.UPX0 Size: 17.3MB - Virtual size: 17.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.UPX1 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.UPX2 Size: 6.1MB - Virtual size: 6.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 445B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ