Behavioral task
behavioral1
Sample
4ba0c5823fbd35391f3d6d55112e5224c9e135ece25015713db4e3584a8effdc.exe
Resource
win10v2004-20240412-en
Behavioral task
behavioral2
Sample
4ba0c5823fbd35391f3d6d55112e5224c9e135ece25015713db4e3584a8effdc.exe
Resource
win11-20240412-en
General
-
Target
4ba0c5823fbd35391f3d6d55112e5224c9e135ece25015713db4e3584a8effdc
-
Size
266KB
-
MD5
25dce52a0c9f9fc60580948a21bf2d22
-
SHA1
343eeda6acd3016b3074510d492eeb5e920f249b
-
SHA256
4ba0c5823fbd35391f3d6d55112e5224c9e135ece25015713db4e3584a8effdc
-
SHA512
2be02b36b4c724bfc4223124211d2f251195ce06c7db4bc5cd66eaf97f55402f91ee414d0c0f926704b79b33c4d91ef8d018a93e89467e5655ab27ce757aa0d9
-
SSDEEP
6144:oXzKdNY49u8rV61tZKJzJTeB6IxACs2p01net:Xa4AzQzU0IpLp01
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 4ba0c5823fbd35391f3d6d55112e5224c9e135ece25015713db4e3584a8effdc unpack001/out.upx
Files
-
4ba0c5823fbd35391f3d6d55112e5224c9e135ece25015713db4e3584a8effdc.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 368KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 163KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 101KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 114KB - Virtual size: 113KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 327KB - Virtual size: 326KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ