Behavioral task
behavioral1
Sample
c29adbd22c775614bc3f00418e5f4fa4b2f38adf3c231c14fe1bcc6694a09427N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
c29adbd22c775614bc3f00418e5f4fa4b2f38adf3c231c14fe1bcc6694a09427N.exe
Resource
win10v2004-20240802-en
General
-
Target
c29adbd22c775614bc3f00418e5f4fa4b2f38adf3c231c14fe1bcc6694a09427N
-
Size
36KB
-
MD5
ad5b3236562b56174e52982618e88580
-
SHA1
3dadee4b0265933f22802c7e7a3a31e8bd7bf0bc
-
SHA256
c29adbd22c775614bc3f00418e5f4fa4b2f38adf3c231c14fe1bcc6694a09427
-
SHA512
16ee0a26b6d18ad04e01f258a7be52386f3fa2d19f865a8db9bb288f8967273e9b5cb990a4e37a66a0973eac4a10d7c2a89a8aa7b33beb7cf07487fb7622d177
-
SSDEEP
768:kBT37CPKK1EXBwzEXBw3sgQw58eGkz2rcuesgQw58eGkz2rcu90TKe+0TKeHzGIE:CTWphNE
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource c29adbd22c775614bc3f00418e5f4fa4b2f38adf3c231c14fe1bcc6694a09427N unpack001/out.upx
Files
-
c29adbd22c775614bc3f00418e5f4fa4b2f38adf3c231c14fe1bcc6694a09427N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ