Behavioral task
behavioral1
Sample
0237f29a4dc9f9410d0f7b81d5774c10N.exe
Resource
win7-20240903-en
General
-
Target
0237f29a4dc9f9410d0f7b81d5774c10N.exe
-
Size
72KB
-
MD5
0237f29a4dc9f9410d0f7b81d5774c10
-
SHA1
9eb56fb10957a03da83748f44bd3cecad39d477c
-
SHA256
f0ca5b3241ce9df6fb47f00343dfbc9182f4e18fb332a914478a8cefb0eb929f
-
SHA512
32c5bcc5420cad258b06452311b0dc6e35522758c148971a0b71c78e0411c13fc87f0557544745fa4df6a52188820d9613e64c22f38b5fcb216a234fc630bd7e
-
SSDEEP
1536:CTW7JJ7TPUnNQHSXIBlE3hha08yZySzCeHbGyH5cNvS9fvSxNFSwUoKh6KcoggBA:hzUmHSXIBlf08qySzCeHby
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 0237f29a4dc9f9410d0f7b81d5774c10N.exe unpack001/out.upx
Files
-
0237f29a4dc9f9410d0f7b81d5774c10N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ