Behavioral task
behavioral1
Sample
726b05872ef00f1cfb90ef4e024b5544d72f7f867784f1e60d66e4a0deeb7c99.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
726b05872ef00f1cfb90ef4e024b5544d72f7f867784f1e60d66e4a0deeb7c99.exe
Resource
win10v2004-20240226-en
General
-
Target
726b05872ef00f1cfb90ef4e024b5544d72f7f867784f1e60d66e4a0deeb7c99
-
Size
1.3MB
-
MD5
fad1d3d068f35fcdaf6c80f62df6869c
-
SHA1
dd61c7697b4ba3ed217970478cd71b2d22722f50
-
SHA256
726b05872ef00f1cfb90ef4e024b5544d72f7f867784f1e60d66e4a0deeb7c99
-
SHA512
76a7b623d1a93de7fcad4b491df0e0d21c43f5adfb91866b8748942937f9c3e17a3ea3b8d45d6743f91a572b633dba098d5b8c6a342894d800015e32083c7ded
-
SSDEEP
24576:A8rfRYSclI3zLO0f5LzvSMNfsGLKjHjsgmAR2BilEupoiSU7ZDDUqOPREKo+emkM:AofRNc8zy0BL7SMNfgjHjsgmACilEuJG
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 726b05872ef00f1cfb90ef4e024b5544d72f7f867784f1e60d66e4a0deeb7c99
Files
-
726b05872ef00f1cfb90ef4e024b5544d72f7f867784f1e60d66e4a0deeb7c99.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.edlwv Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.oh Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE