Behavioral task
behavioral1
Sample
3675694edf10b8ab310437191744d8cc6d136787f7787a13ca9519df7ad44876.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral2
Sample
3675694edf10b8ab310437191744d8cc6d136787f7787a13ca9519df7ad44876.exe
Resource
win11-20240508-en
General
-
Target
3675694edf10b8ab310437191744d8cc6d136787f7787a13ca9519df7ad44876
-
Size
266KB
-
MD5
e843266f88cb52f9f5d36707ef1f27e7
-
SHA1
bb0962e1ecc6f977a27a0a97843114b771a8c700
-
SHA256
3675694edf10b8ab310437191744d8cc6d136787f7787a13ca9519df7ad44876
-
SHA512
eb4b8c47fa2e83a672f31770b4785023b6576734db98d3ac9a68547894127d1755155b5c3e983847d8657b1ee7dba2611e7a9904ba6fb501a34900c835c8403f
-
SSDEEP
3072:DNXEGZJWhfNFC4S60+XoLczrVmXiBAA8DMfZNL+C5LYZNO5McAx9LakATH01ne4S:pXzKdNY49u8rV3wUMi5McwwZ01net
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 3675694edf10b8ab310437191744d8cc6d136787f7787a13ca9519df7ad44876 unpack001/out.upx
Files
-
3675694edf10b8ab310437191744d8cc6d136787f7787a13ca9519df7ad44876.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 368KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 163KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 101KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 114KB - Virtual size: 113KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 327KB - Virtual size: 326KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ