Behavioral task
behavioral1
Sample
75badd11f5ae1b72d2cca8443ad5fb969b9f7782985af4a758a8ecf207ba5043.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
75badd11f5ae1b72d2cca8443ad5fb969b9f7782985af4a758a8ecf207ba5043.exe
Resource
win10v2004-20240226-en
General
-
Target
75badd11f5ae1b72d2cca8443ad5fb969b9f7782985af4a758a8ecf207ba5043
-
Size
65KB
-
MD5
b8fe85ba60214499d7fc7cbd68285459
-
SHA1
28fc1e673220167a2f45d4634aefadd6e267fbc5
-
SHA256
75badd11f5ae1b72d2cca8443ad5fb969b9f7782985af4a758a8ecf207ba5043
-
SHA512
e18e87642b40b837e7ae106e3509338653d3d65b3d10300913f03d0df9fc55c770619df58f478d96e58cbce855407faf8eaafaa608858f45c6015186c23eb1dc
-
SSDEEP
768:bgU3AskqeBjuN3H8e1M3ufNJuKOctu4QtPZuLRprmRKIh4XVewCZ5fxlmTAmIvgX:bR30FjG38e1oulgKFuLurO77m7p512y
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 75badd11f5ae1b72d2cca8443ad5fb969b9f7782985af4a758a8ecf207ba5043
Files
-
75badd11f5ae1b72d2cca8443ad5fb969b9f7782985af4a758a8ecf207ba5043.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 27KB - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE