Behavioral task
behavioral1
Sample
d101035951a89e46dae89c3f9f2290934e1f90c62f6d226e7f2d9bb1ae69f0c7.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral2
Sample
d101035951a89e46dae89c3f9f2290934e1f90c62f6d226e7f2d9bb1ae69f0c7.exe
Resource
win11-20240426-en
General
-
Target
d101035951a89e46dae89c3f9f2290934e1f90c62f6d226e7f2d9bb1ae69f0c7
-
Size
266KB
-
MD5
b72c3e1901613b7c351e67a7d11d65a7
-
SHA1
a7732ef2f97bd7fba3837c18b3a78c15353d6b83
-
SHA256
d101035951a89e46dae89c3f9f2290934e1f90c62f6d226e7f2d9bb1ae69f0c7
-
SHA512
9ce3aa7b79c4abc2850c9981268c5f142fd73d4134b1435dc0abdd5c44178c4efda54c7604e2eb699215bb5c1b7a80eda6bb20c8f45446d88c57aed045ef67cc
-
SSDEEP
3072:SNXEGZJWhfNFC4S60+XoLczrVmXcEhKRuKkEi9ZP7aPQ8ug0x3xS6HkLW9H01net:AXzKdNY49u8rV74qMg0x3jh01net
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource d101035951a89e46dae89c3f9f2290934e1f90c62f6d226e7f2d9bb1ae69f0c7 unpack001/out.upx
Files
-
d101035951a89e46dae89c3f9f2290934e1f90c62f6d226e7f2d9bb1ae69f0c7.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 368KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 163KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 101KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 114KB - Virtual size: 113KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 327KB - Virtual size: 326KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ