Static task
static1
Behavioral task
behavioral1
Sample
c1e86f9792c6dac7ae98f99a2b36bdee567e1bfd9ba8fbe738d877177255803d.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c1e86f9792c6dac7ae98f99a2b36bdee567e1bfd9ba8fbe738d877177255803d.exe
Resource
win10v2004-20240226-en
General
-
Target
c1e86f9792c6dac7ae98f99a2b36bdee567e1bfd9ba8fbe738d877177255803d
-
Size
2.0MB
-
MD5
6d8d1cee04e2e27152533320ddff3c5e
-
SHA1
24c827c45a99e4a9415e7cacbb1c5460fd65aaee
-
SHA256
c1e86f9792c6dac7ae98f99a2b36bdee567e1bfd9ba8fbe738d877177255803d
-
SHA512
fe5cf6e5367dd71d79ae03122ae96afdbcb1fa6f8e248926968af4574a7d7a2a1743856c22d3902a1c2d277bfeb4c3bec0599572adac4a8f80d410334d026f21
-
SSDEEP
24576:lq8gEso7UrZz7fhpCFOfw38PR9g/lSKJWAxuOUdQTS2Fjo4yL3ceLF11oRceQhfo:tE+QG5/xMwn1Ni35hTITgRxtc
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c1e86f9792c6dac7ae98f99a2b36bdee567e1bfd9ba8fbe738d877177255803d
Files
-
c1e86f9792c6dac7ae98f99a2b36bdee567e1bfd9ba8fbe738d877177255803d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
HWAxCMck Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DrtWJgcR Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�� Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE