Behavioral task
behavioral1
Sample
f02496579fd80d4189cd964e85043158fcf359fe53d86fc7999a6f5d3045a15cN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f02496579fd80d4189cd964e85043158fcf359fe53d86fc7999a6f5d3045a15cN.exe
Resource
win10v2004-20240802-en
General
-
Target
f02496579fd80d4189cd964e85043158fcf359fe53d86fc7999a6f5d3045a15cN
-
Size
30KB
-
MD5
de27e1c7c7e1adc739235b6c020a1fd0
-
SHA1
e614652c45be80928036a477f9b28e49358bb536
-
SHA256
f02496579fd80d4189cd964e85043158fcf359fe53d86fc7999a6f5d3045a15c
-
SHA512
a8eba9555db8c0d0105adcd1d95a0624354f358a008044070a92dfd95499176c45ac16da028f3fd4aab9050402efed8f34191374597ec183f8a7f7316622f2e8
-
SSDEEP
768:kBT37CPKKdJJ1EXBwzEXBwdcMcI9ZJ3RL:CTW7JJ7TzJR
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource f02496579fd80d4189cd964e85043158fcf359fe53d86fc7999a6f5d3045a15cN unpack001/out.upx
Files
-
f02496579fd80d4189cd964e85043158fcf359fe53d86fc7999a6f5d3045a15cN.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ