Behavioral task
behavioral1
Sample
723ef8a0372f679542e74db623846f7fd1671aa4a5f3dadcb9e3e93433f14f92.exe
Resource
win7-20240221-en
General
-
Target
723ef8a0372f679542e74db623846f7fd1671aa4a5f3dadcb9e3e93433f14f92
-
Size
417KB
-
MD5
fcf16f27050eae442be46d7f0272c88d
-
SHA1
1f38a36110c053c70573a8d7297aa4bacb71d23d
-
SHA256
723ef8a0372f679542e74db623846f7fd1671aa4a5f3dadcb9e3e93433f14f92
-
SHA512
560fc8ec67f805dbcbdc9d65ac9648deaf441b2408f3a12551c6b5144e14691baca78d954973efd1aaebdd2677f6d7296333fb00cf3a6d11d26da05b106d54de
-
SSDEEP
6144:a8efQ6QPJGcLbjg00Hvy9KHAwYUieL1mqDb9cLzVvQMXqDLR4LCIpbH92d:z6QPJGcE0Svy9KhYUieL1zb9IXUaze
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
Urelas family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 723ef8a0372f679542e74db623846f7fd1671aa4a5f3dadcb9e3e93433f14f92
Files
-
723ef8a0372f679542e74db623846f7fd1671aa4a5f3dadcb9e3e93433f14f92.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 144KB - Virtual size: 144KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 262KB - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE