Behavioral task
behavioral1
Sample
6df7b4513a546cb9e41762d5939a1bec759de4e9b24e9d7ded0c986c339189ac.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral2
Sample
6df7b4513a546cb9e41762d5939a1bec759de4e9b24e9d7ded0c986c339189ac.exe
Resource
win11-20240508-en
General
-
Target
6df7b4513a546cb9e41762d5939a1bec759de4e9b24e9d7ded0c986c339189ac
-
Size
266KB
-
MD5
46d36c44a4b3d05af10041f1dffa90b5
-
SHA1
5c28a798eed6a35d1b5423039575a423a14638e3
-
SHA256
6df7b4513a546cb9e41762d5939a1bec759de4e9b24e9d7ded0c986c339189ac
-
SHA512
b691e96c0aadbf1a2caa5b9890ddac9a558bfd4808497bbc5c8ffd9b0fb70a0113aca49ff1c52ff44f7b003ba010fb2177bc1f02fc8eab6c393d070887b16d4e
-
SSDEEP
3072:6NXEGZJWhfNFC4S60+XoLczrVmXksGe/Ykt97GxepFlBLPBZTBQcFn8CYH01ne4S:IXzKdNY49u8rV6H3kx2/bQcFy01net
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 6df7b4513a546cb9e41762d5939a1bec759de4e9b24e9d7ded0c986c339189ac unpack001/out.upx
Files
-
6df7b4513a546cb9e41762d5939a1bec759de4e9b24e9d7ded0c986c339189ac.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 368KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 163KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 101KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 114KB - Virtual size: 113KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 327KB - Virtual size: 326KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ