Behavioral task
behavioral1
Sample
e827e449846848ff756fa77b05c746e7256b62e5f5b2ad4afe0e4bafa17e2471.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e827e449846848ff756fa77b05c746e7256b62e5f5b2ad4afe0e4bafa17e2471.exe
Resource
win10v2004-20240802-en
General
-
Target
e827e449846848ff756fa77b05c746e7256b62e5f5b2ad4afe0e4bafa17e2471
-
Size
77KB
-
MD5
7800dd85d3dff863dc878c996b225882
-
SHA1
d20d6f736db4c439854fe37174fd9fe71051d82d
-
SHA256
e827e449846848ff756fa77b05c746e7256b62e5f5b2ad4afe0e4bafa17e2471
-
SHA512
454ff923743e657d425f0bb8d101f68016c8ad4106d3f691e035984b625b73a72233c58d8787b045b6f5493dec5da7a2d8a23bd016393ec9849b4b49801c8cb0
-
SSDEEP
1536:CTWn1++PJHJXA/OsIZfzc3/Q8IZxJfes9r9VJhJA:KQSo7ZxJdZVJhJA
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource e827e449846848ff756fa77b05c746e7256b62e5f5b2ad4afe0e4bafa17e2471 unpack001/out.upx
Files
-
e827e449846848ff756fa77b05c746e7256b62e5f5b2ad4afe0e4bafa17e2471.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ