Behavioral task
behavioral1
Sample
662134dfc5ee3fe03404224556c8a0f906541d5533eb47175655e8b223c49dec.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
662134dfc5ee3fe03404224556c8a0f906541d5533eb47175655e8b223c49dec.exe
Resource
win10v2004-20240226-en
General
-
Target
662134dfc5ee3fe03404224556c8a0f906541d5533eb47175655e8b223c49dec
-
Size
201KB
-
MD5
20155e36d3e24abfde8ec37b0efaeb6a
-
SHA1
3e499d1818b97487b7ce18e2dac84a56000e55c3
-
SHA256
662134dfc5ee3fe03404224556c8a0f906541d5533eb47175655e8b223c49dec
-
SHA512
4de3e732f724480932ab23decd9df93a720fecd400d4d1ff13d41f760920337a0a00e7434da7519535ca562d17a00fc13c532559e156f033109befc50de3ec40
-
SSDEEP
3072:SdEUfKj8BYbDiC1ZTK7sxtLUIGhdEUfKj8BYbDiC1ZTK7sxtLUIGm:SUSiZTK40NUSiZTK40q
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 662134dfc5ee3fe03404224556c8a0f906541d5533eb47175655e8b223c49dec
Files
-
662134dfc5ee3fe03404224556c8a0f906541d5533eb47175655e8b223c49dec.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 496KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 77KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE