Behavioral task
behavioral1
Sample
0cddbb788b2ea40753b4ce71fdfbdc8424b97e2f3f3419bfc254d46ffd74c5ce.exe
Resource
win10v2004-20240412-en
Behavioral task
behavioral2
Sample
0cddbb788b2ea40753b4ce71fdfbdc8424b97e2f3f3419bfc254d46ffd74c5ce.exe
Resource
win11-20240412-en
General
-
Target
0cddbb788b2ea40753b4ce71fdfbdc8424b97e2f3f3419bfc254d46ffd74c5ce
-
Size
266KB
-
MD5
3f85605f725bfcf6f5e87fa9e67c0a40
-
SHA1
d25713a11d034c03bfee139e139119a1394e5117
-
SHA256
0cddbb788b2ea40753b4ce71fdfbdc8424b97e2f3f3419bfc254d46ffd74c5ce
-
SHA512
8200736184850cf6528391db4ac79f75968c4bf04ffeea918480ed4a4d0f51d121c03046e017b267dad07f8ceaf12e462b7cb9832f92f80fd87e4d5732b71ded
-
SSDEEP
3072:hNXEGZJWhfNFC4S60+XoLczrVmXq3ht6MqXnOBATu3rejB1MiqGw4C38H01ne4PK:/XzKdNY49u8rV1mJCKvMiqGKI01net
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 0cddbb788b2ea40753b4ce71fdfbdc8424b97e2f3f3419bfc254d46ffd74c5ce unpack001/out.upx
Files
-
0cddbb788b2ea40753b4ce71fdfbdc8424b97e2f3f3419bfc254d46ffd74c5ce.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 368KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 163KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 101KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 114KB - Virtual size: 113KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 327KB - Virtual size: 326KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ