Behavioral task
behavioral1
Sample
48b6187b81de4fab828434630b098dfaff1682f6946b1b69891956b512b2e4aaN.exe
Resource
win7-20240903-en
General
-
Target
48b6187b81de4fab828434630b098dfaff1682f6946b1b69891956b512b2e4aaN
-
Size
54KB
-
MD5
525d12b989ca8db868940da50fb46980
-
SHA1
25601bb3bd488a6e9061ca5e4eae4617c6d384e7
-
SHA256
48b6187b81de4fab828434630b098dfaff1682f6946b1b69891956b512b2e4aa
-
SHA512
3a1f99e45f274ffd3e850ce1fb66c51a074a3779e38e4fba068bac875202e9b37ea81008b22d89fc6368bdc92cfba29f7f217f1a26aa8c9ffc0502c73979fc96
-
SSDEEP
1536:CTW7JJTUNOdu4ULbf7t1asQHZlZsNjzgAxWJxKsiq2oWur9LrvW+QxbDMCAW6R0K:hU4ULbf7t1asQHZlZsNjzgAxWJxKsiq5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 48b6187b81de4fab828434630b098dfaff1682f6946b1b69891956b512b2e4aaN unpack001/out.upx
Files
-
48b6187b81de4fab828434630b098dfaff1682f6946b1b69891956b512b2e4aaN.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ