Behavioral task
behavioral1
Sample
Main.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
Main.exe
Resource
win10v2004-20240426-en
General
-
Target
Main.exe
-
Size
9KB
-
MD5
591b69583b5d480dfc37ebe5d4147da2
-
SHA1
7f6f6a10809302ce31db85795a20fe35cc711246
-
SHA256
57592287aa0d69231dc808146ebcfd18ffd25c18639df768b353380f32526e48
-
SHA512
6004acc7286b951a490fc22ce347b4ab0e53e1af8d32bdbcd81118196a8c15a7a94df0d34cc00beb50d77b855d82085425ba516982de69da605ed3d7a0290b85
-
SSDEEP
192:XPWZn7j7S9g1/gINyzRhLSqFaNJhLkwcud2DH9VwGfct1zO:OZnzS9gtyzn3aNJawcudoD7Uu
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Main.exe
Files
-
Main.exe.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE