Behavioral task
behavioral1
Sample
43e7be3d99be9216cc2bf8ead2155bbe8a0b8b6192953af63e0d3d3cb6286870.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral2
Sample
43e7be3d99be9216cc2bf8ead2155bbe8a0b8b6192953af63e0d3d3cb6286870.exe
Resource
win11-20240419-en
General
-
Target
43e7be3d99be9216cc2bf8ead2155bbe8a0b8b6192953af63e0d3d3cb6286870
-
Size
266KB
-
MD5
db11e1a8db67afbbf51b18ad1fad27c6
-
SHA1
a4d091e69f395b0fe57f62c84ec743320fa7236b
-
SHA256
43e7be3d99be9216cc2bf8ead2155bbe8a0b8b6192953af63e0d3d3cb6286870
-
SHA512
c964af38497a1ed068265f39568015064a02789ac79ba15d2e1f9cc35cb27ee1d8feb432983984a7b1c69039c43700fb8b5f9eac447f6ecb577e765c78213f9b
-
SSDEEP
6144:YXzKdNY49u8rVqsv/93w+atfHcHx1SFe201net:Ha4A5o/93jatfHuxAb01
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 43e7be3d99be9216cc2bf8ead2155bbe8a0b8b6192953af63e0d3d3cb6286870 unpack001/out.upx
Files
-
43e7be3d99be9216cc2bf8ead2155bbe8a0b8b6192953af63e0d3d3cb6286870.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 368KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 163KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 101KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 114KB - Virtual size: 113KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 327KB - Virtual size: 326KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ