Behavioral task
behavioral1
Sample
TrojanDownloader.Win32.exe
Resource
win7-20240708-en
General
-
Target
TrojanDownloader.Win32.Upatre-6d9f5fbfd8ccc92c6e81514883543c292dde84d36ceb89e3b6f60961d3f3fd3aN
-
Size
68KB
-
MD5
fe01d2ae7ea47df1fc24a017d67757e0
-
SHA1
d615f96f0e2ca31c963f52a5aef17ee52f2d602d
-
SHA256
6d9f5fbfd8ccc92c6e81514883543c292dde84d36ceb89e3b6f60961d3f3fd3a
-
SHA512
d257db8b4d58125d92d6901b8527553ceb88ff626d208bb2e780ceb6ef5d732a0b4ed5e7be79be72a559a68537dbcb2ac55b0d0da42c9e17abc3f6bb9bd2cc66
-
SSDEEP
768:jOUWtMYkEOW16YRm/CrE20eJpigKLYfUu63fyEpk58sCuSFeubrXA:iU9YkETRm/Ch7igcuGC58kSxrQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource TrojanDownloader.Win32.Upatre-6d9f5fbfd8ccc92c6e81514883543c292dde84d36ceb89e3b6f60961d3f3fd3aN
Files
-
TrojanDownloader.Win32.Upatre-6d9f5fbfd8ccc92c6e81514883543c292dde84d36ceb89e3b6f60961d3f3fd3aN.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE