Static task
static1
Behavioral task
behavioral1
Sample
c944829106dd8fb3c35d6df843be1932481ef95426e1f9887ec4bc5946c3f29b.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
c944829106dd8fb3c35d6df843be1932481ef95426e1f9887ec4bc5946c3f29b.exe
Resource
win10v2004-20240226-en
General
-
Target
c944829106dd8fb3c35d6df843be1932481ef95426e1f9887ec4bc5946c3f29b
-
Size
415KB
-
MD5
00d59c28391be696f62746bc54b92f92
-
SHA1
9d01492817d7a2b8146e2cd1eb54ea5165562af2
-
SHA256
c944829106dd8fb3c35d6df843be1932481ef95426e1f9887ec4bc5946c3f29b
-
SHA512
9b805ff68ead8d4e198b9dba442a4677d2bfdf14b84fb069d07640e5e8ab55900e9df98f64189ff80de098ef88d026571ed93b94317290321ea524431360fcb0
-
SSDEEP
6144:wlj7cMn6+OEXWzU66bkWmchVySqkvAH3qo0wWJC6G/SMT4FWqCy:wlb6+eU66b5zhVymA/XSRhr
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c944829106dd8fb3c35d6df843be1932481ef95426e1f9887ec4bc5946c3f29b
Files
-
c944829106dd8fb3c35d6df843be1932481ef95426e1f9887ec4bc5946c3f29b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
VHqxTUpa Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IaDsgWGk Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE