Behavioral task
behavioral1
Sample
eac3863f45a4e9ffabbd19d5e65de5e1e072e7b0ace2f3d9700f1cc6af378192.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
eac3863f45a4e9ffabbd19d5e65de5e1e072e7b0ace2f3d9700f1cc6af378192.exe
Resource
win10v2004-20240802-en
General
-
Target
eac3863f45a4e9ffabbd19d5e65de5e1e072e7b0ace2f3d9700f1cc6af378192
-
Size
26KB
-
MD5
edc4f8df516a1153fe63f9802083157a
-
SHA1
d7b249184637352ca6dab02d8bc3caa20a15eae5
-
SHA256
eac3863f45a4e9ffabbd19d5e65de5e1e072e7b0ace2f3d9700f1cc6af378192
-
SHA512
904a27646513797abf7e8aa0f9b6d963163291b34dda08e99bf8750c1de414cb6bf2705bade90f5a97c2e2a4a36e8b9b280ce8e4e34de66e1a674f897d242644
-
SSDEEP
768:kBT37CPKKdJJ1EXBwzEXBwdcMcI9Ro+QOViJfo+QOViJungANf:CTW7JJ7TPUDNf
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource eac3863f45a4e9ffabbd19d5e65de5e1e072e7b0ace2f3d9700f1cc6af378192 unpack001/out.upx
Files
-
eac3863f45a4e9ffabbd19d5e65de5e1e072e7b0ace2f3d9700f1cc6af378192.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ