Behavioral task
behavioral1
Sample
093716711eba19bc0026e7bb14bf1f4a0316a8e3544c69a4881ae131d7fce828.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
093716711eba19bc0026e7bb14bf1f4a0316a8e3544c69a4881ae131d7fce828.exe
Resource
win10v2004-20240226-en
General
-
Target
093716711eba19bc0026e7bb14bf1f4a0316a8e3544c69a4881ae131d7fce828
-
Size
407KB
-
MD5
c3f22c52f778dcd0fa85669dc05eac94
-
SHA1
b72f1ee3ce4a1b2e74cb5053d5c59348d388c7fe
-
SHA256
093716711eba19bc0026e7bb14bf1f4a0316a8e3544c69a4881ae131d7fce828
-
SHA512
0264e93a5766b1e7ee3ea6d436d6e3ccc0095fec7360406e915910d139547f0b4e3fd342bdfe7fe91c03c806a6dde8ba9e9b263ff0a393a8d945f0dfde6f64e4
-
SSDEEP
6144:xjluQoSqIo5R4nM/40yJNb+2z0LOtGnprbJwLVL/GHTM3M2EcxAMPAX9CzsnYP9z:xEQoS+qhU8UroVL9NEcTANCz3h2IQez
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 093716711eba19bc0026e7bb14bf1f4a0316a8e3544c69a4881ae131d7fce828
Files
-
093716711eba19bc0026e7bb14bf1f4a0316a8e3544c69a4881ae131d7fce828.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qhx Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sy Size: 512B - Virtual size: 4KB