Behavioral task
behavioral1
Sample
2790b71d5f555b02b47bc707efc7f5cc4814a9acf9c1e5391d7256ea0b3c7d2d.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral2
Sample
2790b71d5f555b02b47bc707efc7f5cc4814a9acf9c1e5391d7256ea0b3c7d2d.exe
Resource
win11-20240611-en
General
-
Target
2790b71d5f555b02b47bc707efc7f5cc4814a9acf9c1e5391d7256ea0b3c7d2d
-
Size
266KB
-
MD5
04aa48e4fe7e486740c7723c3f374cbc
-
SHA1
566138c308045a6f4b5b64a586a1dd4a4b8a0463
-
SHA256
2790b71d5f555b02b47bc707efc7f5cc4814a9acf9c1e5391d7256ea0b3c7d2d
-
SHA512
02c77ccfa9a1c6f71f92f1e8a81e0081c51a8f7b5d58f6ebc7d1b2b9ad557cc10ecc617eeded684852937a44e26065a3ab7d56a90d781d62fe544bc2609e830e
-
SSDEEP
6144:gXzKdNY49u8rVD1tZKnXkKInEafbq01net:fa4AEUtQbq01
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 2790b71d5f555b02b47bc707efc7f5cc4814a9acf9c1e5391d7256ea0b3c7d2d unpack001/out.upx
Files
-
2790b71d5f555b02b47bc707efc7f5cc4814a9acf9c1e5391d7256ea0b3c7d2d.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 368KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 163KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 101KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 114KB - Virtual size: 113KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 327KB - Virtual size: 326KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ