Behavioral task
behavioral1
Sample
52fd284a69011d01e56e0277b6e6e56ed09f4a1e11ce974468899e5b7c7ab8d7.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
52fd284a69011d01e56e0277b6e6e56ed09f4a1e11ce974468899e5b7c7ab8d7.exe
Resource
win10v2004-20240802-en
General
-
Target
52fd284a69011d01e56e0277b6e6e56ed09f4a1e11ce974468899e5b7c7ab8d7
-
Size
26KB
-
MD5
fb08eaa4505c83548c25db7e6cf4413c
-
SHA1
92c4a9fbb4a65bff967d95cabc4383c902ebc4e9
-
SHA256
52fd284a69011d01e56e0277b6e6e56ed09f4a1e11ce974468899e5b7c7ab8d7
-
SHA512
1a4078f5378523260c5fae8f7729737794a615e3e376e40398723e8c415f2efe278cbef56a8f58c8d990cc581797efd038d54c61c9ac726c6d6e1f2bd8dd13bc
-
SSDEEP
768:kBT37CPKKdJJcbQbf1Oti1JGBQOOiQJhATNyIHAJvHAJLMF/Xqz:CTW7JJZENTNy34
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 52fd284a69011d01e56e0277b6e6e56ed09f4a1e11ce974468899e5b7c7ab8d7 unpack001/out.upx
Files
-
52fd284a69011d01e56e0277b6e6e56ed09f4a1e11ce974468899e5b7c7ab8d7.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ