Behavioral task
behavioral1
Sample
b4bf95f7930a88a7f0220e020c3cbf4938b88800a78d98e51c3bce3beed1643c.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
b4bf95f7930a88a7f0220e020c3cbf4938b88800a78d98e51c3bce3beed1643c.exe
Resource
win10v2004-20240226-en
General
-
Target
b4bf95f7930a88a7f0220e020c3cbf4938b88800a78d98e51c3bce3beed1643c.exe
-
Size
323KB
-
MD5
d92da4af34f68c8fc07a48c3eb6c0dca
-
SHA1
08eac8c6ddf07b9957bd20c0a31fa22d151a17cf
-
SHA256
b4bf95f7930a88a7f0220e020c3cbf4938b88800a78d98e51c3bce3beed1643c
-
SHA512
a3dea6a3a9ec64f7248649071edc2a1e0a7663551f4454435c825ca686f0065db01ddd9aa2951c87b5e4a425631ddd773b159f0000e67949e996d22008c0bef3
-
SSDEEP
6144:JxpqDW7CxijxIgWme7CDDeO95vcBuQUg3AMk+5hFtlKmiIrcsTyeX78l8a5BoSaS:JPqDRlbhUTfaucAMk+5hLdxTjcoSr
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b4bf95f7930a88a7f0220e020c3cbf4938b88800a78d98e51c3bce3beed1643c.exe
Files
-
b4bf95f7930a88a7f0220e020c3cbf4938b88800a78d98e51c3bce3beed1643c.exe.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 444KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 300KB - Virtual size: 300KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE