Behavioral task
behavioral1
Sample
c71836b42b863b16bc24c2d89c781cf0N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c71836b42b863b16bc24c2d89c781cf0N.exe
Resource
win10v2004-20240802-en
General
-
Target
c71836b42b863b16bc24c2d89c781cf0N.exe
-
Size
42KB
-
MD5
c71836b42b863b16bc24c2d89c781cf0
-
SHA1
e7b2a1d5567fab4f4aaea76e2123927c3ac40f4b
-
SHA256
29bb1b6879975ee5bc7fe659a02f9d73f57d2a1c889b808aace3e38a85458ae6
-
SHA512
37a457f9561ecc61f0e7dc22974b9db933477de2164f73e7cf4425d2ce213ed28cb03fa23df4f35e3f8a96635d92fd19784816e8aba991a95a65dc03b82c2532
-
SSDEEP
768:kBT37CPKKdJJ1EXBwzEXBwdcMcwBcCBcw/tio/tiWkjktJwxJw6:CTW7JJ7TTQoQWkjktJwxJw6
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource c71836b42b863b16bc24c2d89c781cf0N.exe unpack001/out.upx
Files
-
c71836b42b863b16bc24c2d89c781cf0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ