Behavioral task
behavioral1
Sample
uploader.exe
Resource
win10-20240404-en
Behavioral task
behavioral2
Sample
uploader.exe
Resource
win7-20240708-en
Behavioral task
behavioral3
Sample
uploader.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral4
Sample
uploader.exe
Resource
win11-20240802-en
General
-
Target
uploader.exe
-
Size
9.1MB
-
MD5
e2deb4f97fef7226ba5a6963d29ef49f
-
SHA1
f0c03f217e99ea965711a5f030e2d197fa74b766
-
SHA256
699397f368c56fe08f4002eae2ceb98cc3b5a82151516d6cab2dc5315495a3e2
-
SHA512
a11e1c4a4986475184d1e36da9ad51ef564c74fb58ebe92ab971c7fd4c9d5802e87df2c55a934681481481cf482896e79c667f702ed6fc83c1f8905f5160373e
-
SSDEEP
196608:sxQyqwJ/TLx4hz7DIxynurErvI9pWj04Qc+4o673pNqljxaMDHdm4:UWKTGz7kMurEUWjEZ4dDKfamd
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource uploader.exe
Files
-
uploader.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 244KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 118KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 60KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
uploader.pyc