Static task
static1
Behavioral task
behavioral1
Sample
9b2a6c58648695ecc17817e97354ee46febf58eb5b606a8aa737b0e48c1a4779.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
9b2a6c58648695ecc17817e97354ee46febf58eb5b606a8aa737b0e48c1a4779.exe
Resource
win10v2004-20240226-en
General
-
Target
9b2a6c58648695ecc17817e97354ee46febf58eb5b606a8aa737b0e48c1a4779
-
Size
1.2MB
-
MD5
a934cfef861f171fea5be7e2f8e01768
-
SHA1
3d2bc553125f26a51458009c833d70d1de07afaf
-
SHA256
9b2a6c58648695ecc17817e97354ee46febf58eb5b606a8aa737b0e48c1a4779
-
SHA512
1ec6270c1c27ecfa7c400238e8b76284a06001c9636d4a2512cb4db443639eb2bfdcbd2323a00b85f1d71b008f213db2a1d6f791b6228a7127206ec56b3eea94
-
SSDEEP
24576:lq8Knb0yOQvsoMkXFcHm0PLl4sCCgoAQg/2aM4yt9yfjNe:SnHOQIkXFcG0PLl4TClgW9yf8
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9b2a6c58648695ecc17817e97354ee46febf58eb5b606a8aa737b0e48c1a4779
Files
-
9b2a6c58648695ecc17817e97354ee46febf58eb5b606a8aa737b0e48c1a4779.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
HWAxCMck Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DrtWJgcR Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�� Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE