Behavioral task
behavioral1
Sample
6120a7488e89b363345908cd6d44b3dad24a587c8df6ede8f67bc02e379b2f06.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
6120a7488e89b363345908cd6d44b3dad24a587c8df6ede8f67bc02e379b2f06.exe
Resource
win10v2004-20231215-en
General
-
Target
6120a7488e89b363345908cd6d44b3dad24a587c8df6ede8f67bc02e379b2f06
-
Size
193KB
-
MD5
930a5d16ad5e623e8192c22f777bbb11
-
SHA1
7640d1db932262c81c47bffa19814086a1dcaa81
-
SHA256
6120a7488e89b363345908cd6d44b3dad24a587c8df6ede8f67bc02e379b2f06
-
SHA512
9c76ba4f7562b8813a4601ea5fcead52a80d8c6c2a6ab5e6292695e508b6fd696c91b100807c8e9a48b3f8078c01629a678d7a38b80bd3174762d67f977f39c1
-
SSDEEP
6144:nmkm8ohwl5aWwEqOCmbB+/LGpU2ZUe0ik:mP8tl5NwPZGpU2d0ik
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6120a7488e89b363345908cd6d44b3dad24a587c8df6ede8f67bc02e379b2f06
Files
-
6120a7488e89b363345908cd6d44b3dad24a587c8df6ede8f67bc02e379b2f06.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 189KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE