Behavioral task
behavioral1
Sample
74725ed6a351ac533e3c7fae583cae96e0f4fa33ee094cc7e2d875f2e70a4209.exe
Resource
win7-20240708-en
General
-
Target
74725ed6a351ac533e3c7fae583cae96e0f4fa33ee094cc7e2d875f2e70a4209
-
Size
585KB
-
MD5
9096fe465f3e6e61f5754edd58f8ca08
-
SHA1
a585a71dfc23f9e5ce78f56b3e49dcb4fcf16bfb
-
SHA256
74725ed6a351ac533e3c7fae583cae96e0f4fa33ee094cc7e2d875f2e70a4209
-
SHA512
acbd6ae4beabca60cd4df4806fec4084c131ff73bd0456cbb43da23e6846e9fba6825fefa4008ee50c6de3b995504033279caef2a9252556935af6024d76e3aa
-
SSDEEP
12288:rOMX3pKw4gn3lJBY5WZRzHJ0M9tc8fXvF4v3UqddgC2I0EuxF9DTKaT:xYw4gnhY5wzp007fXvF4v1ddyRFNT
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 74725ed6a351ac533e3c7fae583cae96e0f4fa33ee094cc7e2d875f2e70a4209 unpack001/out.upx
Files
-
74725ed6a351ac533e3c7fae583cae96e0f4fa33ee094cc7e2d875f2e70a4209.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 575KB - Virtual size: 576KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 230KB - Virtual size: 230KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 56KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 106KB - Virtual size: 106KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 58KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ