Behavioral task
behavioral1
Sample
2afe4a6c19a5f7eef605a494e45f694b10297483d1a3574a40d7795e10d5ba8e.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2afe4a6c19a5f7eef605a494e45f694b10297483d1a3574a40d7795e10d5ba8e.exe
Resource
win10v2004-20240426-en
General
-
Target
2afe4a6c19a5f7eef605a494e45f694b10297483d1a3574a40d7795e10d5ba8e
-
Size
877KB
-
MD5
3094d767b2e9716c648bb42f2d14911b
-
SHA1
485b8ef38299b898d7bd641fddd02ee26a2aae2f
-
SHA256
2afe4a6c19a5f7eef605a494e45f694b10297483d1a3574a40d7795e10d5ba8e
-
SHA512
f18746e45299f52aaae21f46eb3b90dbb458d068a521398274476d388e6a97008c2241fc3c864d9312ba0b4353390d8dd7a815eb7879659d5f841e59e20f5528
-
SSDEEP
24576:aSko4xB+U2PO7GrbuQ2LphIgBYItD9tAw2cI0V+ObmOJmdsm:UvWPO7G2pphIg/Ptv2clV+ObmbL
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 2afe4a6c19a5f7eef605a494e45f694b10297483d1a3574a40d7795e10d5ba8e unpack001/out.upx
Files
-
2afe4a6c19a5f7eef605a494e45f694b10297483d1a3574a40d7795e10d5ba8e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 867KB - Virtual size: 868KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 980KB - Virtual size: 979KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 560KB - Virtual size: 559KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 196KB - Virtual size: 335KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ