Behavioral task
behavioral1
Sample
aab7eb2a3ff636767642d6ec734343f2ccf9f4c161c59aa90165794261b192e3.exe
Resource
win7-20240221-en
General
-
Target
aab7eb2a3ff636767642d6ec734343f2ccf9f4c161c59aa90165794261b192e3
-
Size
328KB
-
MD5
f33e7b6bff6e393b046322f3e44d333c
-
SHA1
0be3df82df9f3ad4f6906681cfe8ec0474d96061
-
SHA256
aab7eb2a3ff636767642d6ec734343f2ccf9f4c161c59aa90165794261b192e3
-
SHA512
562b7303271a61fd1f9e75b121e70c10f1d4a8ff7018ed1ec5732b7222c6052fc49600e7d3b3ab442278024ab05674e82b5f22e29181a31d013b70cfb4b910ed
-
SSDEEP
6144:wObaeY8zPekKKH/hT8PVdkLHtA3nPER5oSHzZ4NyA:wOb/KKH/hT8PVdkJA3uoSih
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
Urelas family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aab7eb2a3ff636767642d6ec734343f2ccf9f4c161c59aa90165794261b192e3
Files
-
aab7eb2a3ff636767642d6ec734343f2ccf9f4c161c59aa90165794261b192e3.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 192KB - Virtual size: 220KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 79KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE