Behavioral task
behavioral1
Sample
4c388706398bddec8179b0e20094e571ed23cb91cc653aea2f8e1e390a8b260c.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4c388706398bddec8179b0e20094e571ed23cb91cc653aea2f8e1e390a8b260c.exe
Resource
win10v2004-20240709-en
General
-
Target
4c388706398bddec8179b0e20094e571ed23cb91cc653aea2f8e1e390a8b260c
-
Size
67KB
-
MD5
657430e03762686d946acf5c064e7864
-
SHA1
6a910dc4da0752beb7aaa084460c861e1aa12fae
-
SHA256
4c388706398bddec8179b0e20094e571ed23cb91cc653aea2f8e1e390a8b260c
-
SHA512
1194151f25cd8bb9fbccbda6477d525828242f33832226243cd16c124ce5d057738b89470c74d23980cf857ef0510ddefe1a91c9b6a9ea84365c56f22a1c49c1
-
SSDEEP
1536:CTW8OmO/fxRfxykK3ZUkK3ZKYAPNERw2wR:6Tuf7fs6eERw2wR
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 4c388706398bddec8179b0e20094e571ed23cb91cc653aea2f8e1e390a8b260c unpack001/out.upx
Files
-
4c388706398bddec8179b0e20094e571ed23cb91cc653aea2f8e1e390a8b260c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ