Static task
static1
Behavioral task
behavioral1
Sample
7b4608d6458099e10585e6462e787410ccb12b2ee59ae99702b8f44bdd9f2e7f.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
7b4608d6458099e10585e6462e787410ccb12b2ee59ae99702b8f44bdd9f2e7f.exe
Resource
win10v2004-20240226-en
General
-
Target
7b4608d6458099e10585e6462e787410ccb12b2ee59ae99702b8f44bdd9f2e7f
-
Size
318KB
-
MD5
2a027874314f0f5c877500e56785dfbb
-
SHA1
bad65639ba5ccc9fc8cafa7d6e8021a753c6ca3d
-
SHA256
7b4608d6458099e10585e6462e787410ccb12b2ee59ae99702b8f44bdd9f2e7f
-
SHA512
58eb4ebf249f13da2d214cd35e746f82ca19d9cb3e7c74be06f9254c661fbd070c705ddf9d00f5109e07a8cc4944fe0760ed3b83f80663dfa79be8c7f0dc5493
-
SSDEEP
6144:oAecbuBQy7Sb0riExpMMF9yyjeEUxmLSOBMvNOzc3m/JSrSrrwZsPHItIPF:becyG+F9yynUazcW/JCM8UoQ
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7b4608d6458099e10585e6462e787410ccb12b2ee59ae99702b8f44bdd9f2e7f
Files
-
7b4608d6458099e10585e6462e787410ccb12b2ee59ae99702b8f44bdd9f2e7f.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
aUEGScBv Size: - Virtual size: 452KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
WmaCHOfP Size: 284KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE