Behavioral task
behavioral1
Sample
f74c3dc71c6ccf79364320e1a9b1bd90N.exe
Resource
win7-20240903-en
General
-
Target
f74c3dc71c6ccf79364320e1a9b1bd90N.exe
-
Size
37KB
-
MD5
f74c3dc71c6ccf79364320e1a9b1bd90
-
SHA1
6cf1a507d81039ddfa1a99522a461c9fcf05b89a
-
SHA256
f2c5da61f38dca340f8ea5208f30f4556577ff3418487dfe79fbfcee0b16ca07
-
SHA512
78db90eb5ced12a96f9e12af168a9c309e37379c14d4de3491d4c83d1e9202bd5b6f748ad29f50287155f9d4963b86f7a125b67617c6dc083e4e21659e5d540c
-
SSDEEP
768:kBT37CPKKdJJ1EXBwzEXBwdcMcI9ltqUKAA726PAx0jB2/7ut7a9iZ:CTW7JJ7T/tTzKAejB2jg7a6
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource f74c3dc71c6ccf79364320e1a9b1bd90N.exe unpack001/out.upx
Files
-
f74c3dc71c6ccf79364320e1a9b1bd90N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ