Behavioral task
behavioral1
Sample
08104fd602108af1ca5b186b92269070N.exe
Resource
win7-20240704-en
General
-
Target
08104fd602108af1ca5b186b92269070N.exe
-
Size
78KB
-
MD5
08104fd602108af1ca5b186b92269070
-
SHA1
eb397bd07c3fbed7e4cfae3e06d29d6a2a3a5c31
-
SHA256
4436cd6f15227a443fccefdb695a56b0bdfcff0256b7d2e241699ef494b1dc62
-
SHA512
65e04a5002fcd233e78f14647d54e3dacdcce4f9ad375a1a3748a330153a976a92df6f3b8a9a7a678131abf1dd05ddc5df2d234c502df191f376d469ed2abf13
-
SSDEEP
1536:kr+BeNcTMWESJamSe7qmqVEiOwGbuMuwAIPdidSpwJwLP6k7P8CXVD:lMMLE+NSera5ubQIG/277
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 08104fd602108af1ca5b186b92269070N.exe unpack001/out.upx
Files
-
08104fd602108af1ca5b186b92269070N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ