Behavioral task
behavioral1
Sample
66aeb1b6acbd3ddccd0168f537908ef77b4a9b98798a6ea23813cbc35731649e.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
66aeb1b6acbd3ddccd0168f537908ef77b4a9b98798a6ea23813cbc35731649e.exe
Resource
win10v2004-20240226-en
General
-
Target
66aeb1b6acbd3ddccd0168f537908ef77b4a9b98798a6ea23813cbc35731649e
-
Size
1.9MB
-
MD5
e7295c37d22a1a5a34c37e44a9c3e4b6
-
SHA1
3db47342efa12f376ae43f7ed056369b307eade3
-
SHA256
66aeb1b6acbd3ddccd0168f537908ef77b4a9b98798a6ea23813cbc35731649e
-
SHA512
0f658e18c6d4125de5211b3a90986bccc41bc53e8b3e73c50b2ee8653b1e96e0586079f81cddfd7e5ee2eda00246a4ecfe61fa7a94eab04d520b95b4a46ef4eb
-
SSDEEP
49152:WLtCQGGWncFYddfBbk7M679SIfYrcDk403PMqnmafFR3:YHyncFY/fBv6BSvIDkLhzD3
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 66aeb1b6acbd3ddccd0168f537908ef77b4a9b98798a6ea23813cbc35731649e
Files
-
66aeb1b6acbd3ddccd0168f537908ef77b4a9b98798a6ea23813cbc35731649e.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.jxmnr Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lpkez Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.g Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.d Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE