Behavioral task
behavioral1
Sample
393d1cd4ca89cad8850fd56fbc3d4f18ac9043c539cc1cb8a9b63bef94661927.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
393d1cd4ca89cad8850fd56fbc3d4f18ac9043c539cc1cb8a9b63bef94661927.exe
Resource
win10v2004-20240226-en
General
-
Target
393d1cd4ca89cad8850fd56fbc3d4f18ac9043c539cc1cb8a9b63bef94661927
-
Size
405KB
-
MD5
a5233fa5e6b66e5734b09d6cc8142ff5
-
SHA1
3192d562a5dd3538d19607eb4d4ae489378dddda
-
SHA256
393d1cd4ca89cad8850fd56fbc3d4f18ac9043c539cc1cb8a9b63bef94661927
-
SHA512
fbbec248b2ef77c387eb8595e87e5abfc75b25983b1a5dc64f13e19cadd039c381bd7d8b13e8a887a33de7c1f5a556a1b52f563df9ee85f041ff1cb8feac4583
-
SSDEEP
6144:VEcvV4Fustn8KnUI8/wkkexkEphMk8jve/awxX7GH:VBV4Fust04kk3EphMkMvei6XqH
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 393d1cd4ca89cad8850fd56fbc3d4f18ac9043c539cc1cb8a9b63bef94661927
Files
-
393d1cd4ca89cad8850fd56fbc3d4f18ac9043c539cc1cb8a9b63bef94661927.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 328KB - Virtual size: 328KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 70KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE