Behavioral task
behavioral1
Sample
8b4dba37b23a8067bedbd4d3d2916210497dc866e34a87272faff982b5a651f3.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
8b4dba37b23a8067bedbd4d3d2916210497dc866e34a87272faff982b5a651f3.exe
Resource
win10v2004-20240226-en
General
-
Target
8b4dba37b23a8067bedbd4d3d2916210497dc866e34a87272faff982b5a651f3
-
Size
2.0MB
-
MD5
b54b822065662c742a706dcd7a52c407
-
SHA1
6a9706f8bcb3904ee712fb60db317c68bd8eec58
-
SHA256
8b4dba37b23a8067bedbd4d3d2916210497dc866e34a87272faff982b5a651f3
-
SHA512
92156f341a061b10fa5f25e0a0785157f59d9233cd68033bdbe4db29097674cd79aeeee301c487c1d2611e3c4e84ef5674d9989219c5bc7e8f4d1581ce8e3cd7
-
SSDEEP
49152:u68AkYZ/gjhy9lDZ9ZyIQ0WLTlndoSn8RB4eX1B5ALQrWikfejmPY32t:D8kgjGNZxQ7VdoSG3AQrWikfM8lt
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8b4dba37b23a8067bedbd4d3d2916210497dc866e34a87272faff982b5a651f3
Files
-
8b4dba37b23a8067bedbd4d3d2916210497dc866e34a87272faff982b5a651f3.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE