Behavioral task
behavioral1
Sample
ca2285369c24974b6cee8254ac7b3a772b5939e438ae56a26a7ba6a8df73d09c.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
ca2285369c24974b6cee8254ac7b3a772b5939e438ae56a26a7ba6a8df73d09c.exe
Resource
win10v2004-20241007-en
General
-
Target
ca2285369c24974b6cee8254ac7b3a772b5939e438ae56a26a7ba6a8df73d09c
-
Size
31KB
-
MD5
063c4c27a3352d7f1527de27a08ac87e
-
SHA1
a9935c81078c9af57cae1967ca6bf6a07e0cb0c1
-
SHA256
ca2285369c24974b6cee8254ac7b3a772b5939e438ae56a26a7ba6a8df73d09c
-
SHA512
292d5febb72c2ff588d27b618afb3eaff5d76a815bbba39694ceb5b479b3b0f8739407b7695f5d4d702c51b5e4803d163f7af7e9d0996d2df3456a88b639ffe5
-
SSDEEP
384:QOlIBXDaU7CPKK0TIhfJJ1Evd5BvhzaM9mSIEvd5BvhzaM9mSsxmMxm9+9T6MwBE:kBT37CPKKdJJ1EXBwzEXBwdcMcI9E36
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource ca2285369c24974b6cee8254ac7b3a772b5939e438ae56a26a7ba6a8df73d09c unpack001/out.upx
Files
-
ca2285369c24974b6cee8254ac7b3a772b5939e438ae56a26a7ba6a8df73d09c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ