Behavioral task
behavioral1
Sample
ad381e6c8ea2c2380b541ce738451269186aeadee151d9e260d369439a44c377.exe
Resource
win7-20240705-en
General
-
Target
ad381e6c8ea2c2380b541ce738451269186aeadee151d9e260d369439a44c377
-
Size
1.5MB
-
MD5
ae80eb4c09c117c173e0616ba2296255
-
SHA1
f21b23324ac79bb77b69f61120c8433ce85f22a9
-
SHA256
ad381e6c8ea2c2380b541ce738451269186aeadee151d9e260d369439a44c377
-
SHA512
0f4426f4d0806e65f66b9fb731fb68405d1751a09f5e6734555af44840825349f8e82006a4de962ebbf712a60fbc29b0b908199872c122a7a22e7ca361428be5
-
SSDEEP
49152:gIj4zCtWashAjKPTyk7kQqlAv9u3erSCygJF36jMAAL7xC4:gIj4zCtWaGPTZQ7Ku3ern36IAAHo4
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource ad381e6c8ea2c2380b541ce738451269186aeadee151d9e260d369439a44c377 unpack001/out.upx
Files
-
ad381e6c8ea2c2380b541ce738451269186aeadee151d9e260d369439a44c377.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 948KB - Virtual size: 947KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 104KB - Virtual size: 434KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ