Behavioral task
behavioral1
Sample
76337808a2f224a65b4f8fc51304dd6048cb8a57c8215a2e9a61d630311ea8ea.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral2
Sample
76337808a2f224a65b4f8fc51304dd6048cb8a57c8215a2e9a61d630311ea8ea.exe
Resource
win11-20240419-en
General
-
Target
76337808a2f224a65b4f8fc51304dd6048cb8a57c8215a2e9a61d630311ea8ea
-
Size
266KB
-
MD5
7d4a111c2a83a393af2a9a73be8398fa
-
SHA1
bc63dfe0662b4e845642387070929fce05ae38e6
-
SHA256
76337808a2f224a65b4f8fc51304dd6048cb8a57c8215a2e9a61d630311ea8ea
-
SHA512
342f3867d9199b18067596bd9a5abf822666b9dd830b6a18337f02dbe2ee291429cd8ddc9cb2dc6c06e067c9be79d9a7de976147ce3f124ce64e92c3d5170fa3
-
SSDEEP
6144:DXzKdNY49u8rVXjib9lk3nzlMY2qz601net:8a4AEj89qBzb601
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 76337808a2f224a65b4f8fc51304dd6048cb8a57c8215a2e9a61d630311ea8ea unpack001/out.upx
Files
-
76337808a2f224a65b4f8fc51304dd6048cb8a57c8215a2e9a61d630311ea8ea.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 368KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 163KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 101KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 114KB - Virtual size: 113KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 327KB - Virtual size: 326KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ