Behavioral task
behavioral1
Sample
75abdf1b74c0047593eb2f8c578224554d06dc0801bc5228477b52489022b7fc.exe
Resource
win7-20240221-en
General
-
Target
75abdf1b74c0047593eb2f8c578224554d06dc0801bc5228477b52489022b7fc
-
Size
410KB
-
MD5
2d7f3e0e430402fba66446b1ca36dd48
-
SHA1
5537c856ad2c125c021748e0739db47b947064de
-
SHA256
75abdf1b74c0047593eb2f8c578224554d06dc0801bc5228477b52489022b7fc
-
SHA512
994c5d2bddf656aad189cca5da2d3efbbbc2602d0ceee15d56cbc020da2f77bddb406b5579a775bd5f85aeda1e11407c7b90424a609bfee5c138b02d1410a807
-
SSDEEP
6144:cEo/rmV71+I8ZD/h/vFfhxxQO4B4tqv+Hq/On1NHwBzQ4bed76a3FoSx0E:cEo/6YnZVB1rkAqcNAzQCed7J1oSf
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 75abdf1b74c0047593eb2f8c578224554d06dc0801bc5228477b52489022b7fc
Files
-
75abdf1b74c0047593eb2f8c578224554d06dc0801bc5228477b52489022b7fc.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 224KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 313KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE