Static task
static1
Behavioral task
behavioral1
Sample
5eb815c2c0de8d9ebd027518db0aba5e55da4b899dae18eeecfe5a490cf53671.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
5eb815c2c0de8d9ebd027518db0aba5e55da4b899dae18eeecfe5a490cf53671.exe
Resource
win10v2004-20240226-en
General
-
Target
5eb815c2c0de8d9ebd027518db0aba5e55da4b899dae18eeecfe5a490cf53671
-
Size
1.9MB
-
MD5
854cec4f101fa57ea32cd965830db5bd
-
SHA1
805ad749e0c5ba9da96eba6f17e5b130d65ce08e
-
SHA256
5eb815c2c0de8d9ebd027518db0aba5e55da4b899dae18eeecfe5a490cf53671
-
SHA512
36c34e5750f49fcddc9b4f31354ce7dddc018c7901efdf8ec76a640a0d062008fd758368395a456a10d54a7dd2264d75628a182426ee9618012f152f9910847b
-
SSDEEP
49152:mTHEUlWTkyncy7zALSJ/B1j2niEHO4eS6m7kS0sX5RHY1Yx:8EUETkyncU4kj6iMO4umIa51A
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5eb815c2c0de8d9ebd027518db0aba5e55da4b899dae18eeecfe5a490cf53671
Files
-
5eb815c2c0de8d9ebd027518db0aba5e55da4b899dae18eeecfe5a490cf53671.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
NqQg Size: - Virtual size: 2.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fDGT Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 165KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE