Static task
static1
Behavioral task
behavioral1
Sample
b301e75b8e912087b505604a2a2f23577631d69514bad1c8223b81adc8a37911.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
b301e75b8e912087b505604a2a2f23577631d69514bad1c8223b81adc8a37911.exe
Resource
win10v2004-20231215-en
General
-
Target
b301e75b8e912087b505604a2a2f23577631d69514bad1c8223b81adc8a37911
-
Size
319KB
-
MD5
535b9dd057abf2df643aa19e09763911
-
SHA1
a3014dec836317a85a647de84f1607aca4f17f9b
-
SHA256
b301e75b8e912087b505604a2a2f23577631d69514bad1c8223b81adc8a37911
-
SHA512
ecb8357a19199fe6e5a1787bd61449b8d2c5a73f47958380beb492b0520337a44ec5044d1ed1b74cb5448d426a8b3e09f74421f072d624ccc6985c2755931a01
-
SSDEEP
6144:oAecbuBQy7Sb0riExpMMF9yyjeEUxmLSOBMvNOzc3m/JSrSrrwZsPHItIPG:becyG+F9yynUazcW/JCM8Uot
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b301e75b8e912087b505604a2a2f23577631d69514bad1c8223b81adc8a37911
Files
-
b301e75b8e912087b505604a2a2f23577631d69514bad1c8223b81adc8a37911.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
aUEGScBv Size: - Virtual size: 452KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
WmaCHOfP Size: 284KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE