Behavioral task
behavioral1
Sample
70e4833698c691a66b734f7aee3ca55e5840423a02f3d88c991cea0682deb225N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
70e4833698c691a66b734f7aee3ca55e5840423a02f3d88c991cea0682deb225N.exe
Resource
win10v2004-20241007-en
General
-
Target
70e4833698c691a66b734f7aee3ca55e5840423a02f3d88c991cea0682deb225N.exe
-
Size
90KB
-
MD5
1b176a356b7789110644425a48072090
-
SHA1
9701387cf5eed05527d889277bd43499d3f498de
-
SHA256
70e4833698c691a66b734f7aee3ca55e5840423a02f3d88c991cea0682deb225
-
SHA512
262499de93cad4246986e633852285a8df70da577c5eb895b5e5e67cb8f8c5eca828041b50aebe1221dab26a9d5ab0a21531868781376fad4d5ca365af535ddd
-
SSDEEP
1536:UiYwjQt6QJvzZsgDIWzm/xsXfv+hYhyQQyV5uv4JBrB7w5VRGulTG1ZCL8nj1oDw:0wjZQJvzZsgsW6/Afv+hYfQIm4/rdE3q
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 70e4833698c691a66b734f7aee3ca55e5840423a02f3d88c991cea0682deb225N.exe unpack001/out.upx
Files
-
70e4833698c691a66b734f7aee3ca55e5840423a02f3d88c991cea0682deb225N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 236KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 86KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 292KB - Virtual size: 291KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ