Behavioral task
behavioral1
Sample
c6ab5bf3aeace869ca5939f5ff083efcdb2d4c08224d869ae345dfc1ed1e2708.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral2
Sample
c6ab5bf3aeace869ca5939f5ff083efcdb2d4c08224d869ae345dfc1ed1e2708.exe
Resource
win11-20240221-en
General
-
Target
c6ab5bf3aeace869ca5939f5ff083efcdb2d4c08224d869ae345dfc1ed1e2708
-
Size
266KB
-
MD5
bdbc9ae10a4b3b83246afc6767337334
-
SHA1
c13b135244092a1a8445dd18dec78bbe988b02b3
-
SHA256
c6ab5bf3aeace869ca5939f5ff083efcdb2d4c08224d869ae345dfc1ed1e2708
-
SHA512
3c9e9b5b7ee6dc88829ad12e80c8995b7b17608776e8006504566562e54a812efd3fcce27a156b8879dfb2c8a3067c20b5a4f947524e39d298b4419f6b1894c4
-
SSDEEP
6144:nXzKdNY49u8rVQ1TxvJCKvMiqGH01net:4a4A3Vke01
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource c6ab5bf3aeace869ca5939f5ff083efcdb2d4c08224d869ae345dfc1ed1e2708 unpack001/out.upx
Files
-
c6ab5bf3aeace869ca5939f5ff083efcdb2d4c08224d869ae345dfc1ed1e2708.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 368KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 163KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 101KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 114KB - Virtual size: 113KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 327KB - Virtual size: 326KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ