Static task
static1
Behavioral task
behavioral1
Sample
b8dd68639aac57fd546e1a00bae66197b92877383623bca6b9167f3c3fa2c8c0.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
b8dd68639aac57fd546e1a00bae66197b92877383623bca6b9167f3c3fa2c8c0.exe
Resource
win10v2004-20240226-en
General
-
Target
b8dd68639aac57fd546e1a00bae66197b92877383623bca6b9167f3c3fa2c8c0
-
Size
135KB
-
MD5
1946bbaf6a38f1e94fa7390050c18ce9
-
SHA1
f1f281305babfcba3440c6d2d09ddd35f5e9822b
-
SHA256
b8dd68639aac57fd546e1a00bae66197b92877383623bca6b9167f3c3fa2c8c0
-
SHA512
10aed7821fbb0b5ed86f0ec69832e59fb82c17abb00effb588df2c8432c4c2d81722f2fe7e7f4849ec8e55eab3f1a082aa33e1a9deb93990764e6f065b104784
-
SSDEEP
3072:aDOkexJLFdrrXiHXktT4TxS0EaJjDlpy+MxV6Qad+y:aDOxZXrSHXUTshE+jDlpyWQaEy
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b8dd68639aac57fd546e1a00bae66197b92877383623bca6b9167f3c3fa2c8c0
Files
-
b8dd68639aac57fd546e1a00bae66197b92877383623bca6b9167f3c3fa2c8c0.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
HWAxCMck Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DrtWJgcR Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�� Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE