Behavioral task
behavioral1
Sample
dd24e01c9d9234e5278d35b7ca4ae490ff8e445b68901f4df387f2667479e195.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral2
Sample
dd24e01c9d9234e5278d35b7ca4ae490ff8e445b68901f4df387f2667479e195.exe
Resource
win11-20240426-en
General
-
Target
dd24e01c9d9234e5278d35b7ca4ae490ff8e445b68901f4df387f2667479e195
-
Size
266KB
-
MD5
06b061e7ecdda872c6c1a1a3b8ece31d
-
SHA1
46ec924293e27106a5282a29d5f19cab8476e354
-
SHA256
dd24e01c9d9234e5278d35b7ca4ae490ff8e445b68901f4df387f2667479e195
-
SHA512
300033fdd84bba93cbc249e554b434cc0924aa75166321c6a6be6c3460fdc00bd77ef85a3c42909f54a4b203d2563916f286f45f07080d7530632d7679d6d59f
-
SSDEEP
6144:7XzKdNY49u8rV7RJYGvhV7k1QXzF5Oe901net:Ea4A4jYq/7lXie901
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource dd24e01c9d9234e5278d35b7ca4ae490ff8e445b68901f4df387f2667479e195 unpack001/out.upx
Files
-
dd24e01c9d9234e5278d35b7ca4ae490ff8e445b68901f4df387f2667479e195.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 368KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 163KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 101KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 114KB - Virtual size: 113KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 327KB - Virtual size: 326KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ