Behavioral task
behavioral1
Sample
ee0aa51767b166a5724254535e103c0e7b82f34bb6a256d2552d1fd665575f62.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
ee0aa51767b166a5724254535e103c0e7b82f34bb6a256d2552d1fd665575f62.exe
Resource
win10v2004-20240226-en
General
-
Target
ee0aa51767b166a5724254535e103c0e7b82f34bb6a256d2552d1fd665575f62
-
Size
931KB
-
MD5
a644df364e92855f445c7b8c9ef9170e
-
SHA1
1eb70985fd11430a6452897b41d15de0f42c370c
-
SHA256
ee0aa51767b166a5724254535e103c0e7b82f34bb6a256d2552d1fd665575f62
-
SHA512
19b2ddc8bae908102fa0e7417abdabf4c15960c0e8fedf4d79248c638cc9d54b9b0556ab2c164779fa3af57a426c25b5d88ab7660749d13fe6830b06d55ec505
-
SSDEEP
24576:VhlRaC5k2I4nTHiwgk8jupA2zm1JJbRuRuJaXGISquodK/:Hh5klKCwn87H4RbX9nE/
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ee0aa51767b166a5724254535e103c0e7b82f34bb6a256d2552d1fd665575f62
Files
-
ee0aa51767b166a5724254535e103c0e7b82f34bb6a256d2552d1fd665575f62.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE