Behavioral task
behavioral1
Sample
0412a5e9fb60affa78d9c56170c4d552afa24e55bffbef5d6df46fdae8647c11.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
0412a5e9fb60affa78d9c56170c4d552afa24e55bffbef5d6df46fdae8647c11.exe
Resource
win10v2004-20240802-en
General
-
Target
0412a5e9fb60affa78d9c56170c4d552afa24e55bffbef5d6df46fdae8647c11
-
Size
25KB
-
MD5
7d6a2fad569aba7f41f65219b6419616
-
SHA1
63790378d042f77e3f47b4200f82515349d8dd7f
-
SHA256
0412a5e9fb60affa78d9c56170c4d552afa24e55bffbef5d6df46fdae8647c11
-
SHA512
4beb5e5d68822d05e6d0d1c141218b93795b7d65d2e7c5ffc5247658f16bff723161f870124be0436f1e84eec0df7f6f0f98d55c8657fe2b783ab529332611a3
-
SSDEEP
384:QOlIBXDaU7CPKK0TIhfJJ1Evd5BvhzaM9mSIEvd5BvhzaM9mSsxmMxm9+9y1sm:kBT37CPKKdJJ1EXBwzEXBwdcMcI9y1sm
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 0412a5e9fb60affa78d9c56170c4d552afa24e55bffbef5d6df46fdae8647c11 unpack001/out.upx
Files
-
0412a5e9fb60affa78d9c56170c4d552afa24e55bffbef5d6df46fdae8647c11.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ