Static task
static1
Behavioral task
behavioral1
Sample
d45cf9c55bdba0b48bdae56ec1a2b2c15a0f61857cce01a0d2831700bc180d4b.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d45cf9c55bdba0b48bdae56ec1a2b2c15a0f61857cce01a0d2831700bc180d4b.exe
Resource
win10v2004-20220901-en
General
-
Target
d45cf9c55bdba0b48bdae56ec1a2b2c15a0f61857cce01a0d2831700bc180d4b
-
Size
275KB
-
MD5
00a2190df90003260fa5217598e5f732
-
SHA1
135bad6afa932acf91e5e7ce14c1745a93d1480d
-
SHA256
d45cf9c55bdba0b48bdae56ec1a2b2c15a0f61857cce01a0d2831700bc180d4b
-
SHA512
02a7c145ba9479bc04da17278e342ab79308b74f63fced3fabc13c13cc972037db2987b220fd16790e7b646aacd321833963d23228e0ddcb594e69292af5ad02
-
SSDEEP
6144:KAx5DqSlve6rVw5VOIEdVQz1cP2oJsm8pw5ahfctKFrt0+8:KAxpVtPrVwCJQCP2cQRuwmB
Malware Config
Signatures
-
Patched UPX-packed file 1 IoCs
Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.
resource yara_rule sample patched_upx
Files
-
d45cf9c55bdba0b48bdae56ec1a2b2c15a0f61857cce01a0d2831700bc180d4b.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 756KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 274KB - Virtual size: 276KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE