Behavioral task
behavioral1
Sample
8f72ac7ff9366cfa4046a79aae2e2eac92d45648cdde38cd1871d2772eb86761.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
8f72ac7ff9366cfa4046a79aae2e2eac92d45648cdde38cd1871d2772eb86761.exe
Resource
win10v2004-20240226-en
General
-
Target
8f72ac7ff9366cfa4046a79aae2e2eac92d45648cdde38cd1871d2772eb86761
-
Size
2.9MB
-
MD5
0e076ec421c25a79e3ee1439ef8eb0cd
-
SHA1
e1b8d1134e01dcb046b08298b45bb03c91f16aa6
-
SHA256
8f72ac7ff9366cfa4046a79aae2e2eac92d45648cdde38cd1871d2772eb86761
-
SHA512
34d635c8ab6fdebb775f561aef172a405a941dfd3ba86243c74de84a685d85c7c76ad2dc2bebc9aeeb27218386fc2477f506a7e96ed1706f6d56e600985739ce
-
SSDEEP
49152:XPN5fLCC5lmru2QacbgOaUwX9Uc8mQU9LZ4rXdmJ4hZhV57LfgR2GVZbHEe:XPN5T7zmru2QacsOuX9iOl4rXdmJ4HhC
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8f72ac7ff9366cfa4046a79aae2e2eac92d45648cdde38cd1871d2772eb86761
Files
-
8f72ac7ff9366cfa4046a79aae2e2eac92d45648cdde38cd1871d2772eb86761.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE