Behavioral task
behavioral1
Sample
e3f83eeede7e020c23b6747392a5efb5f92d160b143cec0d1cdc8b5493f49b84.exe
Resource
win7-20240708-en
General
-
Target
e3f83eeede7e020c23b6747392a5efb5f92d160b143cec0d1cdc8b5493f49b84
-
Size
25KB
-
MD5
5d33d65540f5dea051b4fa90aea4dbab
-
SHA1
3a1cf6735b900056819923bd3f07e39c9f43e9bc
-
SHA256
e3f83eeede7e020c23b6747392a5efb5f92d160b143cec0d1cdc8b5493f49b84
-
SHA512
24b988c953a7b0e09ce159da9846a13af461aaeea39ea64cc2c40bf776ac4a16decc9b55b3bb9d2d96baf7e37aae83dcf8a63d465aece259da2de26eb8668729
-
SSDEEP
384:UATttSPw84JRFnYJz7sto9KJzq98kENZ7JGwAv8nrEvS:BEw84DJ3om298FGwA0nrkS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource e3f83eeede7e020c23b6747392a5efb5f92d160b143cec0d1cdc8b5493f49b84 unpack001/out.upx
Files
-
e3f83eeede7e020c23b6747392a5efb5f92d160b143cec0d1cdc8b5493f49b84.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.htext Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE