Behavioral task
behavioral1
Sample
1878f5e2172392892e0e22ad6cc1b1b8d4116df8e69a83417c8d1e2c76374525N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1878f5e2172392892e0e22ad6cc1b1b8d4116df8e69a83417c8d1e2c76374525N.exe
Resource
win10v2004-20240802-en
General
-
Target
1878f5e2172392892e0e22ad6cc1b1b8d4116df8e69a83417c8d1e2c76374525N
-
Size
118KB
-
MD5
4b4cdaf96ca80565da49bdcb0fc9c6a0
-
SHA1
2b1589a48f573865bd59cdf0593b038e9e97d670
-
SHA256
1878f5e2172392892e0e22ad6cc1b1b8d4116df8e69a83417c8d1e2c76374525
-
SHA512
8d5f17fa2e68df76e3fad193569ae0880eed4c194852edf54733405602bf8393a4c871dd1dae0401d019d10a239a0edd4ad622d2f12eae90e533e156362d696d
-
SSDEEP
1536:CTWn1++PJHJXA/OsIZfzc3/Q8IZT+JZkeZrAJZkeZrOTWn1++PJHJXA/OsIZfzc/:KQSo7ZWQSo7ZG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 1878f5e2172392892e0e22ad6cc1b1b8d4116df8e69a83417c8d1e2c76374525N unpack001/out.upx
Files
-
1878f5e2172392892e0e22ad6cc1b1b8d4116df8e69a83417c8d1e2c76374525N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ