Behavioral task
behavioral1
Sample
2ab3cb1b956f1a62c5f28b609b784260N.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2ab3cb1b956f1a62c5f28b609b784260N.exe
Resource
win10v2004-20240709-en
General
-
Target
2ab3cb1b956f1a62c5f28b609b784260N.exe
-
Size
19KB
-
MD5
2ab3cb1b956f1a62c5f28b609b784260
-
SHA1
d1d6a93849b9e3b17e6859acd5fc8967ad89c898
-
SHA256
d066cd08b88015b7a37a96ad9c931ba5d4384f5c21c77644ce936613bcd26d58
-
SHA512
e2d1a08606552dc2834b802dda56f6e2c4054eaa8ce6c588bdfb62e58c6c5d89d708b76db7a45bad8bc4afd0c17de7e3659b02c8a5e44cf04f3f012b031dee9b
-
SSDEEP
384:QOlIBXDaU7CPKK0TIhfJJPbUEobUE51lRtJio:kBT37CPKKdJJTU3U2lRtn
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 2ab3cb1b956f1a62c5f28b609b784260N.exe unpack001/out.upx
Files
-
2ab3cb1b956f1a62c5f28b609b784260N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ