Behavioral task
behavioral1
Sample
e3a2e885318921c0a494667c83af6bcdb258760e0ba9e4fc88489a25f1479ff0.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
e3a2e885318921c0a494667c83af6bcdb258760e0ba9e4fc88489a25f1479ff0.exe
Resource
win10v2004-20240709-en
General
-
Target
e3a2e885318921c0a494667c83af6bcdb258760e0ba9e4fc88489a25f1479ff0
-
Size
6.7MB
-
MD5
c0dd70119d34658012e0d7ef729a7bd2
-
SHA1
e5ecc6f81a1b17f23fe51c960329abe2996c9a88
-
SHA256
e3a2e885318921c0a494667c83af6bcdb258760e0ba9e4fc88489a25f1479ff0
-
SHA512
04b9403641ec0ada0f45e12f1e02639e3ed8219d6f9172459827f0546a2b88367492da2ad94bed0420ee579bf44110445e0f1554d6a86606144f5cac53b4d764
-
SSDEEP
196608:zD4AHp6hoSPoCINv+9KEMsWk+yMC1qKZtpez8:n4VhoCoC+jzsT1q8a8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource e3a2e885318921c0a494667c83af6bcdb258760e0ba9e4fc88489a25f1479ff0 unpack001/out.upx
Files
-
e3a2e885318921c0a494667c83af6bcdb258760e0ba9e4fc88489a25f1479ff0.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 7.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 6.7MB - Virtual size: 6.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 57KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13.8MB - Virtual size: 13.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ