Behavioral task
behavioral1
Sample
52c63be8a466e32fc76e2cfaa05b45babbccbeb32c05a0739e3d7a2f77d9e1be.exe
Resource
win7-20240221-en
General
-
Target
52c63be8a466e32fc76e2cfaa05b45babbccbeb32c05a0739e3d7a2f77d9e1be
-
Size
4.9MB
-
MD5
2489a0cc359284df1fe4b5feac693b91
-
SHA1
31da13fc54f307eb5d7daff09ab9cc36bab7c5f2
-
SHA256
52c63be8a466e32fc76e2cfaa05b45babbccbeb32c05a0739e3d7a2f77d9e1be
-
SHA512
23905b753a0d3bd24528d42331aed3534a9c521e8b2bfab42931de932aa4ed6d4b0d7694a1fde98bedd2b0ea259b87ce6bd5a1abcd20994598147c8ae8ee16bc
-
SSDEEP
98304:TgTQHFboTGqQ3laNYH+4HcpWCgdjooJnoQF347dznf96Eegp8GF:sTQlboTpQVas5vZoenR471nXegT
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 52c63be8a466e32fc76e2cfaa05b45babbccbeb32c05a0739e3d7a2f77d9e1be
Files
-
52c63be8a466e32fc76e2cfaa05b45babbccbeb32c05a0739e3d7a2f77d9e1be.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 6.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4.4MB - Virtual size: 4.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 494KB - Virtual size: 496KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE