Static task
static1
Behavioral task
behavioral1
Sample
a0d9fe234dfb386cbfd404504646b6cc3a3200eefdfad20ea6b0dd848268d0c7.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a0d9fe234dfb386cbfd404504646b6cc3a3200eefdfad20ea6b0dd848268d0c7.exe
Resource
win10v2004-20231215-en
General
-
Target
a0d9fe234dfb386cbfd404504646b6cc3a3200eefdfad20ea6b0dd848268d0c7
-
Size
387KB
-
MD5
fb3caf0f6884a8b2170b3c5191ca6579
-
SHA1
9ed48842788556d43568a613787afed397b2bc5c
-
SHA256
a0d9fe234dfb386cbfd404504646b6cc3a3200eefdfad20ea6b0dd848268d0c7
-
SHA512
17ebf0c8c56e98d625f2e378a1d6b507a070e379fd843d63b42c60c6009eb8b6601182185e392f9176a25787b530b8617778379a8711e6ab501af2c41c08f421
-
SSDEEP
3072:EPUHpiKT2t2UHIu05W7SAFJJOUD9cckiKop97f3r8n9t9Ygnt8V6jUU9mgEGL4kc:9rTfUHeeSKOS9ccFKk3Y9t9YcVS2FziD
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a0d9fe234dfb386cbfd404504646b6cc3a3200eefdfad20ea6b0dd848268d0c7
Files
-
a0d9fe234dfb386cbfd404504646b6cc3a3200eefdfad20ea6b0dd848268d0c7.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
FKP0 Size: - Virtual size: 18.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
FKP1 Size: 203KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE