Behavioral task
behavioral1
Sample
290831ddfc86c8eabf25b9d35ba03208c9d90316f91f01a29a8599b5fc9d6809.exe
Resource
win7-20240220-en
General
-
Target
290831ddfc86c8eabf25b9d35ba03208c9d90316f91f01a29a8599b5fc9d6809
-
Size
418KB
-
MD5
8f4c0df0d61e14e6d8be66ff28dd6384
-
SHA1
1bd5771e2c6c201f811b0a18ab08b59b18fcea9a
-
SHA256
290831ddfc86c8eabf25b9d35ba03208c9d90316f91f01a29a8599b5fc9d6809
-
SHA512
48172c0e375b82a3b1b5235bd5e9673a7d66dd5ca17e0a2b4745658ce1e45ed089ffbe34b443bc8cc7028e5a81869e7a5dac22b08822659338c6212938f39b54
-
SSDEEP
6144:a8efQ6QPJGcLbjg00Hvy9KHAwYUieL1mqDb9cLzVvQMXqDLR4LCIpbH92X:z6QPJGcE0Svy9KhYUieL1zb9IXUaz0
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
Urelas family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 290831ddfc86c8eabf25b9d35ba03208c9d90316f91f01a29a8599b5fc9d6809
Files
-
290831ddfc86c8eabf25b9d35ba03208c9d90316f91f01a29a8599b5fc9d6809.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 144KB - Virtual size: 144KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 262KB - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE