Behavioral task
behavioral1
Sample
e1757787b664c15286c1eb9271a6b1edc9a235c8790eda463fb3bbffbf31a57d.exe
Resource
win7-20240708-en
General
-
Target
e1757787b664c15286c1eb9271a6b1edc9a235c8790eda463fb3bbffbf31a57d.exe
-
Size
2.7MB
-
MD5
11328d645b2248a7adc51a0eecf4c66a
-
SHA1
6a571bee1f6aaaf8981e191bdcb6826addbdc379
-
SHA256
e1757787b664c15286c1eb9271a6b1edc9a235c8790eda463fb3bbffbf31a57d
-
SHA512
b962f7fc608cc51c7e1edf3f50a5fd35b97231a90900f809f87c101de7fd54c250aadc03b25918a5d3ba4db2f7820ed41a40d97bf6b5894ce913604f4c5e953d
-
SSDEEP
49152:BkFJ7i9s0KEMprZTtbPQYnrDh4oOSGUncNwxVMmTf/Db82kG8D4k20V:uStkrZT5HrDhULUAkVrDLjk/450
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource e1757787b664c15286c1eb9271a6b1edc9a235c8790eda463fb3bbffbf31a57d.exe unpack001/out.upx
Files
-
e1757787b664c15286c1eb9271a6b1edc9a235c8790eda463fb3bbffbf31a57d.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 2.9MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3.3MB - Virtual size: 3.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 270KB - Virtual size: 357KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 902B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.symtab Size: 512B - Virtual size: 4B
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ