Behavioral task
behavioral1
Sample
e636d5e5fb6d62b7dce5bde6a6076ec000504e43ff9a577a58917efb13f389ab.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
e636d5e5fb6d62b7dce5bde6a6076ec000504e43ff9a577a58917efb13f389ab.exe
Resource
win10v2004-20240802-en
General
-
Target
e636d5e5fb6d62b7dce5bde6a6076ec000504e43ff9a577a58917efb13f389ab
-
Size
24KB
-
MD5
70d56fd1d4dc1921869af0faec886c20
-
SHA1
77913c2048aba8001d56ca586be4a47194c4df7d
-
SHA256
e636d5e5fb6d62b7dce5bde6a6076ec000504e43ff9a577a58917efb13f389ab
-
SHA512
004c65c2956206e7e9eae7f9db98f194a6e4b962832b60549b07269e683df103ac7424f6c0f8f0100a352a2a9b9c38af60d8ca7c8c97149ad5a08d889be22c89
-
SSDEEP
384:QOlIBXDaU7CPKK0TIhfJJ1Evd5BvhzaM9mSIEvd5BvhzaM9mSsxmMxm9+9qQn:kBT37CPKKdJJ1EXBwzEXBwdcMcI9p
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource e636d5e5fb6d62b7dce5bde6a6076ec000504e43ff9a577a58917efb13f389ab unpack001/out.upx
Files
-
e636d5e5fb6d62b7dce5bde6a6076ec000504e43ff9a577a58917efb13f389ab.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ