Behavioral task
behavioral1
Sample
3106a16a2e6ed8a20da27a45003df3de707fc840381b7af366105174b398e0c4.exe
Resource
win7-20240708-en
General
-
Target
3106a16a2e6ed8a20da27a45003df3de707fc840381b7af366105174b398e0c4
-
Size
170KB
-
MD5
4bee3a0d8b453c336ee5681707591ae9
-
SHA1
072b62518c26459b9c56b4468e2d94bd9bf3b566
-
SHA256
3106a16a2e6ed8a20da27a45003df3de707fc840381b7af366105174b398e0c4
-
SHA512
97a5b7c1838e74feff6f5dd16e5fa9c4f62f584e61b112eb6750d5924de6c266ef8353f4e4a1b8894cd472a2ba2d12afe9f8bf660dabc884ba37e632b0cab0a8
-
SSDEEP
3072:htD33HsuI9KHpKHDGCLOwstyhZFChcssc56FUrgxvbSD4UQrO2lxGKu:jDns99QpKjShcHUaS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 3106a16a2e6ed8a20da27a45003df3de707fc840381b7af366105174b398e0c4 unpack001/out.upx
Files
-
3106a16a2e6ed8a20da27a45003df3de707fc840381b7af366105174b398e0c4.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ