Behavioral task
behavioral1
Sample
91041808e563bb72365baf843ac62b5b88fbf0b318ab15d7d779e9a64632a2e5.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
91041808e563bb72365baf843ac62b5b88fbf0b318ab15d7d779e9a64632a2e5.exe
Resource
win10v2004-20240226-en
General
-
Target
91041808e563bb72365baf843ac62b5b88fbf0b318ab15d7d779e9a64632a2e5
-
Size
289KB
-
MD5
8d9c4f64b1c2620277276616ea2ec00f
-
SHA1
4760a54ffcbe776c6a87c49be1767a69029d17ec
-
SHA256
91041808e563bb72365baf843ac62b5b88fbf0b318ab15d7d779e9a64632a2e5
-
SHA512
99767b4234dc2d43438c5a92f1144c14b50bced99ec041ad588b30102e4440e1f7ce4c654b3cf8c985235b8c781623c4fa4aa62c8f13b3688ebd9fd1b4f32f87
-
SSDEEP
6144:A8jluQoSoIo5RjRmu298v1OfA8PNFuKla5dSwc9dMJv9ajU7J:A8EQoSMXRk98v1OdB055OMDT7J
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 91041808e563bb72365baf843ac62b5b88fbf0b318ab15d7d779e9a64632a2e5
Files
-
91041808e563bb72365baf843ac62b5b88fbf0b318ab15d7d779e9a64632a2e5.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.edlwv Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.oh Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE