Static task
static1
Behavioral task
behavioral1
Sample
8769af4b2a29d90077c11c783a9c615c50f21b4c75e4b4f6e9d52e1c9883d763.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
8769af4b2a29d90077c11c783a9c615c50f21b4c75e4b4f6e9d52e1c9883d763.exe
Resource
win10v2004-20240226-en
General
-
Target
8769af4b2a29d90077c11c783a9c615c50f21b4c75e4b4f6e9d52e1c9883d763
-
Size
160KB
-
MD5
23140748a1e248fa9507a56b27ed9210
-
SHA1
22828283c9d9023aad8d71e92251f95ad3e0f7c7
-
SHA256
8769af4b2a29d90077c11c783a9c615c50f21b4c75e4b4f6e9d52e1c9883d763
-
SHA512
6e5c9f9d6e0a9071ce22f73a2814d3ab20328d8b1105018994ce9ecc7192f1649ae0611909b09978159edd085968c9184ed5fe1f06d6132d5ed645dc02113fd8
-
SSDEEP
3072:aDOkexJLFdrrXiHXktT4TxSEBZvoB1tFDVoFqwFpfXL3cFo:aDOxZXrSHXUTshDUYnDPL3t
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8769af4b2a29d90077c11c783a9c615c50f21b4c75e4b4f6e9d52e1c9883d763
Files
-
8769af4b2a29d90077c11c783a9c615c50f21b4c75e4b4f6e9d52e1c9883d763.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
HWAxCMck Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DrtWJgcR Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�� Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE