Static task
static1
Behavioral task
behavioral1
Sample
040ed6492bcf03170cadb29af1395e1431a765b1c023e9cf3969c36e59726d50.exe
Resource
win7-20240221-en
General
-
Target
040ed6492bcf03170cadb29af1395e1431a765b1c023e9cf3969c36e59726d50
-
Size
330KB
-
MD5
868d7913bd150e9a090a8360c2d9782d
-
SHA1
5bbecd9602eb14a49fffa90892344bb0a679ec32
-
SHA256
040ed6492bcf03170cadb29af1395e1431a765b1c023e9cf3969c36e59726d50
-
SHA512
a8b99496fce37c94f54939177c0e93290bf8788953c1d8ecdbe8c9388798b63f7f612a57969c59395f8bc62a0146dc5cab5c375fff01f3bd05fe98fd9a04ecb9
-
SSDEEP
768:xHhroUKQB7bwJvJS0pdInLpABd4UDZ10FiQY2Jf3XmJDgqhmzuYDmJf2kJNc:RhL3MIU0LcN0FiQY2Jf3XGDgqmD
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 040ed6492bcf03170cadb29af1395e1431a765b1c023e9cf3969c36e59726d50
Files
-
040ed6492bcf03170cadb29af1395e1431a765b1c023e9cf3969c36e59726d50.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
���!���� Size: 308KB - Virtual size: 308KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
���x�k Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE