Behavioral task
behavioral1
Sample
4baf7c2aaf641e5bfc330c86720dab50N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4baf7c2aaf641e5bfc330c86720dab50N.exe
Resource
win10v2004-20240802-en
General
-
Target
4baf7c2aaf641e5bfc330c86720dab50N.exe
-
Size
67KB
-
MD5
4baf7c2aaf641e5bfc330c86720dab50
-
SHA1
539e315c99bd146b586b79d0dc5dc45106a63f07
-
SHA256
089a2de41351b7c51bb61fdca9563feb5d3265f00c92b0433072e32ae8599126
-
SHA512
d60b4796567b06fe7618baeaa1bd393d57855ad78720091015386c705be75601fda4f0e57594dea28315668a97d2266e00c99f3577c2d189b3d5023fb7cc78a7
-
SSDEEP
1536:CTW7JJ7T1vJvnmdGwmdGnTW7JJ7T1vJvnmdGwmdGA:hPf
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 4baf7c2aaf641e5bfc330c86720dab50N.exe unpack001/out.upx
Files
-
4baf7c2aaf641e5bfc330c86720dab50N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ