Behavioral task
behavioral1
Sample
54025edc5e77e26bd73125524132d3b487db15327534eccc2529ec71402a1f5d.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral2
Sample
54025edc5e77e26bd73125524132d3b487db15327534eccc2529ec71402a1f5d.exe
Resource
win11-20240419-en
General
-
Target
54025edc5e77e26bd73125524132d3b487db15327534eccc2529ec71402a1f5d
-
Size
266KB
-
MD5
acb93ba7e7fe2a82bb6df3ab93d1e9a3
-
SHA1
815ddac24d649d43d7ba9052f5638ebd6a772b00
-
SHA256
54025edc5e77e26bd73125524132d3b487db15327534eccc2529ec71402a1f5d
-
SHA512
c8ff048cf7d60a6d8f90a9e748018db0ca618696e93ac76b652675ed820ec3a377aa93d1d251407cd40b49fd8747536a347ed924b647354c1d222424bde5865d
-
SSDEEP
6144:fXzKdNY49u8rVYtwSxvfdqbCe1KZNT01net:ga4A2SxvAbCfT01
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 54025edc5e77e26bd73125524132d3b487db15327534eccc2529ec71402a1f5d unpack001/out.upx
Files
-
54025edc5e77e26bd73125524132d3b487db15327534eccc2529ec71402a1f5d.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 368KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 163KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 101KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 114KB - Virtual size: 113KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 327KB - Virtual size: 326KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ