Behavioral task
behavioral1
Sample
47de58bed8096b253b5885074712963ba9449ae08491759092c0538c2b83ff19.exe
Resource
win7-20240220-en
General
-
Target
47de58bed8096b253b5885074712963ba9449ae08491759092c0538c2b83ff19
-
Size
486KB
-
MD5
8a5bd70d6c757c50c6dfe8ccf11320c5
-
SHA1
3eb9ddeaae4e2bc927047a114085ca0874499235
-
SHA256
47de58bed8096b253b5885074712963ba9449ae08491759092c0538c2b83ff19
-
SHA512
2b5a16eab2e80f5eb1df00dfebd7af05a360574bc4444bcd2f99d5148a1bfdfca872a0c90f6ccf930237c8b897a2ceaba17d111333d106b096ae234727ed99f0
-
SSDEEP
6144:WxBWeMRygxDLbHxlSBxzJT1REBB6q1gBFJV6AvRqsf6YU+FM+3Yn/fCXjQGDqAdC:m3MQIDKJXTq+Xxvo0U+d3s/fCX0F
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
Urelas family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 47de58bed8096b253b5885074712963ba9449ae08491759092c0538c2b83ff19
Files
-
47de58bed8096b253b5885074712963ba9449ae08491759092c0538c2b83ff19.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 153KB - Virtual size: 328KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 81KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 237KB - Virtual size: 240KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE