Behavioral task
behavioral1
Sample
2a7ae3768ef73435b59d8445461cf730N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2a7ae3768ef73435b59d8445461cf730N.exe
Resource
win10v2004-20240802-en
General
-
Target
2a7ae3768ef73435b59d8445461cf730N
-
Size
39KB
-
MD5
2a7ae3768ef73435b59d8445461cf730
-
SHA1
4b41b66c541104429491db4a330d897699a91212
-
SHA256
9084e914df6758f038f36bc20af65b0c23466c79d2047998f045cd5f8e7808b7
-
SHA512
e2949bafb8ee03a094a26adf0a9f9c4f0362f7aefd7b297272f0a579c0111e96b07a1d68574d2ff22b9ccb44e6b6004c22c82686c0a6a408d589629c03468353
-
SSDEEP
384:QOlIBXDaU7CPKK0TIhfJJPbUEobUE51lRtJicszsOVCqd71rxHdcU8gXd71rxHdm:kBT37CPKKdJJTU3U2lRtJfOLP7Pm
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 2a7ae3768ef73435b59d8445461cf730N unpack001/out.upx
Files
-
2a7ae3768ef73435b59d8445461cf730N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ