Behavioral task
behavioral1
Sample
main.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
main.exe
Resource
win10v2004-20240802-en
General
-
Target
main.exe
-
Size
3.2MB
-
MD5
9752c4717f3b7e1ad53f53a4f410f83f
-
SHA1
f58d6011fd394506d5f5b13e04b6fb00d752fe40
-
SHA256
a4849f4b4803684252d35b0b96222e896c90f947a97711b626abd00e3142ffb3
-
SHA512
afb74b717482f4cae044e8b0e8cb362c2c3fbef9282004d1d7062a6d634ff3229f0a5fc2f3f191730e16a5caca0c4d18631d9fb7687d872ffec93459a57aafd5
-
SSDEEP
98304:7150ZCgssFKffCnRjy7tpQt3vraLYXPJKHpuR:R5Es8sfCjipi/u8XPoHpu
Malware Config
Signatures
-
Processes:
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource main.exe
Files
-
main.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3.2MB - Virtual size: 3.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE