Behavioral task
behavioral1
Sample
e885c7052cdf54c6c7e05ec887fae61ec8e3ff448f0af8b116bb860e1fc362f9.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e885c7052cdf54c6c7e05ec887fae61ec8e3ff448f0af8b116bb860e1fc362f9.exe
Resource
win10v2004-20240226-en
General
-
Target
e885c7052cdf54c6c7e05ec887fae61ec8e3ff448f0af8b116bb860e1fc362f9
-
Size
786KB
-
MD5
08d317952e761ac990433660da9c1859
-
SHA1
e7e1f7a7b9a9d4c8a4245f232ffcf7bca4f8cffb
-
SHA256
e885c7052cdf54c6c7e05ec887fae61ec8e3ff448f0af8b116bb860e1fc362f9
-
SHA512
f2835df8f8ea9bfddffd2b86e5a818f672a5ea3a9a3ccf7c52f83212d7aafdbc17c95132a94ebcb4af01437012357bfb00b3815a44ec0d0474c862779662b9ef
-
SSDEEP
12288:YEQoSnqhUaG5dS5+4tJTrbwXZGPYSGHR63aJ8FCFYUbnhCk0+Mxr+:YoUagUzJvyAoA3aJ8FC6+MY
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e885c7052cdf54c6c7e05ec887fae61ec8e3ff448f0af8b116bb860e1fc362f9
Files
-
e885c7052cdf54c6c7e05ec887fae61ec8e3ff448f0af8b116bb860e1fc362f9.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ktlju Size: 4KB - Virtual size: 4KB
.wu Size: 512B - Virtual size: 4KB