Behavioral task
behavioral1
Sample
4b9a2cab3264e553d9115f88d2ae2960N.exe
Resource
win7-20240705-en
General
-
Target
4b9a2cab3264e553d9115f88d2ae2960N.exe
-
Size
2.7MB
-
MD5
4b9a2cab3264e553d9115f88d2ae2960
-
SHA1
70d1dd8b07c714ab8e24b3a64566003c5e8312b0
-
SHA256
1cc00d52c82bc1834e446eb8fb7a57d61fb3f4491d74d5ee1892b254e551a887
-
SHA512
e19a3cbd93934ca82b110cc9d9a40a2b5ff6d0afbfa5257cfd7f0e99382257cd2b8493eb0a5cdbdd10e4b638453247c6bcdf417f597f33be4b97f847997b695e
-
SSDEEP
49152:jpWoRGZpagAu+OVE3sEVHaHy4Swx+VXEi1HmVKo7GWc2XGMSye0oiBnEIsgCrhVS:jshpcu+O9EVHwy4T+dGVR7bc2XG3ye01
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 4b9a2cab3264e553d9115f88d2ae2960N.exe unpack001/out.upx
Files
-
4b9a2cab3264e553d9115f88d2ae2960N.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 916KB - Virtual size: 915KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 621KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 31KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ