Behavioral task
behavioral1
Sample
040b8269565362dff8bcf347915892746c5c19186d78f4440966c080e7d4bfc6.exe
Resource
win10v2004-20240704-en
Behavioral task
behavioral2
Sample
040b8269565362dff8bcf347915892746c5c19186d78f4440966c080e7d4bfc6.exe
Resource
win11-20240704-en
General
-
Target
040b8269565362dff8bcf347915892746c5c19186d78f4440966c080e7d4bfc6
-
Size
266KB
-
MD5
746ab9d3eb6b380d148114ceef7dc31a
-
SHA1
025b1de118c63b9f0553252e8ce34c13437f852b
-
SHA256
040b8269565362dff8bcf347915892746c5c19186d78f4440966c080e7d4bfc6
-
SHA512
34ad9367071544557a1c862e445f798fa28eb7cef2094ea60fc7e4a77cf82c373121cb55294f652e7915c3d261970e4054955db6a8ce2f46ce22b7c150156749
-
SSDEEP
3072:fNXEGZJWhfNFC4S60+XoLczrVmX8qfNVt6gP5fZNL+C5LYZNO5McAx9LmBGb0Bj0:lXzKdNY49u8rV+7tf5Mi5Mcwr0BjeB
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 040b8269565362dff8bcf347915892746c5c19186d78f4440966c080e7d4bfc6 unpack001/out.upx
Files
-
040b8269565362dff8bcf347915892746c5c19186d78f4440966c080e7d4bfc6.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 368KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 163KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 101KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 114KB - Virtual size: 113KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 327KB - Virtual size: 326KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ