Behavioral task
behavioral1
Sample
66bf96ce9032281d12bdcfb5040aad3383ab560a54d2a9a0f83b7f327d4c1031.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
66bf96ce9032281d12bdcfb5040aad3383ab560a54d2a9a0f83b7f327d4c1031.exe
Resource
win10v2004-20240226-en
General
-
Target
66bf96ce9032281d12bdcfb5040aad3383ab560a54d2a9a0f83b7f327d4c1031
-
Size
365KB
-
MD5
03a6dbc490d5f04b05b35a2edee4f957
-
SHA1
5f72ab6039cec31ba7cfcdecda58a92564c3846e
-
SHA256
66bf96ce9032281d12bdcfb5040aad3383ab560a54d2a9a0f83b7f327d4c1031
-
SHA512
5daf8da5a23c7aeab0da6a9f83732798fd7e665c56f5908e6faa19715df42aecccb9416e9071af6e6dc43c3673419f6cdeb6572ba9ac38d7d9609da3cfb97fa6
-
SSDEEP
3072:vJzL9UjrL5vSfmxI96Iopz2D4cIdwO7ESE6asU9JrOoutzTzmMl:h1UTxSfmxI96sscIdfI6I9hOoSXztl
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 66bf96ce9032281d12bdcfb5040aad3383ab560a54d2a9a0f83b7f327d4c1031
Files
-
66bf96ce9032281d12bdcfb5040aad3383ab560a54d2a9a0f83b7f327d4c1031.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 212KB - Virtual size: 248KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 121KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE