Behavioral task
behavioral1
Sample
398f8cfb3ad4b8a264113131274adbb5e55ee9621d4934deb5b3f30344220853.exe
Resource
win10v2004-20240419-en
Behavioral task
behavioral2
Sample
398f8cfb3ad4b8a264113131274adbb5e55ee9621d4934deb5b3f30344220853.exe
Resource
win11-20240426-en
General
-
Target
398f8cfb3ad4b8a264113131274adbb5e55ee9621d4934deb5b3f30344220853
-
Size
266KB
-
MD5
b2ea2219981927e54d6a01e96f26365f
-
SHA1
84053434ce9c6b892f4f6de02ffd5177ebeee68a
-
SHA256
398f8cfb3ad4b8a264113131274adbb5e55ee9621d4934deb5b3f30344220853
-
SHA512
5b3f4927265632a4d3d828534f0dc22624c23100c3283c8f11b7e86edc0dd0a0ca07b615eb54145dd568f01eeb2123be672a3abd9ebeadd4c40f3829b9145623
-
SSDEEP
6144:PXzKdNY49u8rVzJm4QBSXNn2qNo01net:Qa4AmJm4fNY01
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 398f8cfb3ad4b8a264113131274adbb5e55ee9621d4934deb5b3f30344220853 unpack001/out.upx
Files
-
398f8cfb3ad4b8a264113131274adbb5e55ee9621d4934deb5b3f30344220853.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 368KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 163KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 101KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 114KB - Virtual size: 113KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 327KB - Virtual size: 326KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ