Behavioral task
behavioral1
Sample
main.exe
Resource
win11-20240709-en
General
-
Target
main.exe
-
Size
16.8MB
-
MD5
3de51a25a607a5e8a391562c3e07d628
-
SHA1
ec0e3db4b05122b01a98739ec5745459ba7d92f7
-
SHA256
a9597b9d2e665e3116059a801cb40496788f1c95499e5d41d2f89aa92193b4f0
-
SHA512
9fb6c100784a460852a6fc2d78645dbdbe0929cf59ba12233c65b45c8665503e2296a875485755611d22e4564c9f76f2b0deb7e9591832c103262306f6105bfe
-
SSDEEP
393216:lSQGL01+l+uq+VvIDfDgrc6M+brQ+RiJwtpzHJ:lSQa01+l+uqgvIb0IXiQ+RiKtv
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource main.exe
Files
-
main.exe.exe windows:5 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 340KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 125KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 172KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
main.pyc