Behavioral task
behavioral1
Sample
77c38d4dacb336633e37bfd6e0577e5ccd4e40c5812c1de6fb7f8746c2d21997.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
77c38d4dacb336633e37bfd6e0577e5ccd4e40c5812c1de6fb7f8746c2d21997.exe
Resource
win10v2004-20240226-en
General
-
Target
77c38d4dacb336633e37bfd6e0577e5ccd4e40c5812c1de6fb7f8746c2d21997
-
Size
272KB
-
MD5
f760ce638e16afb28b109f24d456205c
-
SHA1
151dbcd4f091e649ccaa0fab09fb757a5c0a2c09
-
SHA256
77c38d4dacb336633e37bfd6e0577e5ccd4e40c5812c1de6fb7f8746c2d21997
-
SHA512
e96c052cebba0a8fe9c70c27ee5dc651f920195e322bce2faaeebfd258f23e558cfbcd26e7092abda0e98649e5bbb614e218f32a7cce00493eeabaefb1703067
-
SSDEEP
6144:VjluQoSv4DSIo5R4nM/40ySP1M49hcROSXcuc10U+r+9pCJDP:VEQoSfq+x04SXo10U+FJz
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 77c38d4dacb336633e37bfd6e0577e5ccd4e40c5812c1de6fb7f8746c2d21997
Files
-
77c38d4dacb336633e37bfd6e0577e5ccd4e40c5812c1de6fb7f8746c2d21997.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE