Behavioral task
behavioral1
Sample
f5a9f579bdeceb1c504af26ae1e4fd9654e3aab2564f8071f2dbde53c7587f40.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral2
Sample
f5a9f579bdeceb1c504af26ae1e4fd9654e3aab2564f8071f2dbde53c7587f40.exe
Resource
win11-20240221-en
General
-
Target
f5a9f579bdeceb1c504af26ae1e4fd9654e3aab2564f8071f2dbde53c7587f40
-
Size
266KB
-
MD5
eefa7564af4782022230f3395669bc67
-
SHA1
60c37bf39be568003df00e1983298793370f5031
-
SHA256
f5a9f579bdeceb1c504af26ae1e4fd9654e3aab2564f8071f2dbde53c7587f40
-
SHA512
97374c5f5134af4f0bcaf540a56c6025ae8d38e05f5cabe65c789c44ba366260fa6110f5c45957edd9fdc53c8387aeb4d0de28daa938e3f8a064bdacc9b57eb9
-
SSDEEP
6144:dXzKdNY49u8rVEHr0gJCKvMiqGA01net:+a4Abrlkl01
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource f5a9f579bdeceb1c504af26ae1e4fd9654e3aab2564f8071f2dbde53c7587f40 unpack001/out.upx
Files
-
f5a9f579bdeceb1c504af26ae1e4fd9654e3aab2564f8071f2dbde53c7587f40.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 368KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 163KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 101KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 114KB - Virtual size: 113KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 327KB - Virtual size: 326KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ