__dllCall_@0
Behavioral task
behavioral1
Sample
6c89b1b2440b3b4f448d5a79207fc3e4e110eebfc0fd4e1e3b6a5344f87f2c64N.exe
Resource
win7-20240903-en
General
-
Target
6c89b1b2440b3b4f448d5a79207fc3e4e110eebfc0fd4e1e3b6a5344f87f2c64N
-
Size
277KB
-
MD5
c5ac448ad21bf36b22143fdce9cf7500
-
SHA1
69bf56ac78c21f29629eca5c12a3bdb4cb0985b4
-
SHA256
6c89b1b2440b3b4f448d5a79207fc3e4e110eebfc0fd4e1e3b6a5344f87f2c64
-
SHA512
868485a855575d49edc07c905387034a66eddaed893b93f40f3881ccf7fb5e432fa203f797dc4dafb7aec9bd499082c224243ebb853308b2ee460c948b625114
-
SSDEEP
6144:V62zdProSkb2wYdSHdRYI8OvoXL1o17FkmXg5o0p:U2zdcSkbHwS9RYI8koX6Zkmw5o0p
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 6c89b1b2440b3b4f448d5a79207fc3e4e110eebfc0fd4e1e3b6a5344f87f2c64N unpack001/out.upx
Files
-
6c89b1b2440b3b4f448d5a79207fc3e4e110eebfc0fd4e1e3b6a5344f87f2c64N.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 266KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
.text Size: 386KB - Virtual size: 385KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 96KB - Virtual size: 95KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 120KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ