Behavioral task
behavioral1
Sample
4e9b9e37c1b85d3a72f72cb35a015880N.exe
Resource
win7-20240705-en
General
-
Target
4e9b9e37c1b85d3a72f72cb35a015880N.exe
-
Size
37KB
-
MD5
4e9b9e37c1b85d3a72f72cb35a015880
-
SHA1
7633c592185f5e6f4262fa66cc896099374eb3e5
-
SHA256
1391080339cb2d9632ac50ac8aac3fb4ddc3348129852168fefd4042a96f25a2
-
SHA512
26d052942a0d447f823c86bb2b140256f4593a5667466e00ac3dd20dfd97ed76f245666d8b84ddf3d12a8eaa20135f34c3b2917b696c2e871c594f3c6b88637d
-
SSDEEP
768:6n/xydo0jaMzHrJL3YMZvGOkXCMeKM5TiWC8ZLxD4P:6n9+ZI4vPTiWC84P
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 4e9b9e37c1b85d3a72f72cb35a015880N.exe unpack001/out.upx
Files
-
4e9b9e37c1b85d3a72f72cb35a015880N.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ