Behavioral task
behavioral1
Sample
e838c4d3facc71e7b09855002b06469ab8a9d7855bbff833e2e54690e5534947.exe
Resource
win10v2004-20240704-en
General
-
Target
e838c4d3facc71e7b09855002b06469ab8a9d7855bbff833e2e54690e5534947
-
Size
1.1MB
-
MD5
072defa855b863c4a97b96485494137e
-
SHA1
ca576e898d99d7b4e28925a648b90486021929df
-
SHA256
e838c4d3facc71e7b09855002b06469ab8a9d7855bbff833e2e54690e5534947
-
SHA512
a6a9450652c80e27c8d2bc720da9fdd9eb8d89efc159abedde0bffdc9a0ae925e212c452efe3c0879a1519b20391c7a9472ab8d2b083374820fd6d59b03794c1
-
SSDEEP
24576:0IhBEtgRWj0nWUp8zFsnRyXu59Fl4wI7kA7hjQVMeROE6K1S:0rtgsuLp3nRy+XFl4f737hjfeRv60S
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource e838c4d3facc71e7b09855002b06469ab8a9d7855bbff833e2e54690e5534947 unpack001/out.upx
Files
-
e838c4d3facc71e7b09855002b06469ab8a9d7855bbff833e2e54690e5534947.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 904KB - Virtual size: 903KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 964KB - Virtual size: 962KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 104KB - Virtual size: 385KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ