Behavioral task
behavioral1
Sample
e95f5a283fa2f8e67b5aeab4f88d718d9fb3274b115c8da48d6cdb975b1c25d2.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e95f5a283fa2f8e67b5aeab4f88d718d9fb3274b115c8da48d6cdb975b1c25d2.exe
Resource
win10v2004-20240802-en
General
-
Target
e95f5a283fa2f8e67b5aeab4f88d718d9fb3274b115c8da48d6cdb975b1c25d2
-
Size
26KB
-
MD5
31debe286e8ecfa00bcdfe0d2a5ac45e
-
SHA1
334dc30453ab364256f507746ff7eaa8b0ba9778
-
SHA256
e95f5a283fa2f8e67b5aeab4f88d718d9fb3274b115c8da48d6cdb975b1c25d2
-
SHA512
6b2697bb70bdf07d514ba2aae17fbd33a9665095f62b551691bfbc00306b13599ca11ee62680af7a2fc7621d30d0a199d95b06cd78e269836364ce453905a26b
-
SSDEEP
768:kBT37CPKKdJJ1EXBwzEXBwdcMcI9ebZoe:CTW7JJ7TYZoe
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource e95f5a283fa2f8e67b5aeab4f88d718d9fb3274b115c8da48d6cdb975b1c25d2 unpack001/out.upx
Files
-
e95f5a283fa2f8e67b5aeab4f88d718d9fb3274b115c8da48d6cdb975b1c25d2.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ