Static task
static1
Behavioral task
behavioral1
Sample
1e9301515c7e2555c71060ca5281ee2cb2c7197f59924a586f27281fea2490f7.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1e9301515c7e2555c71060ca5281ee2cb2c7197f59924a586f27281fea2490f7.exe
Resource
win10v2004-20240226-en
General
-
Target
1e9301515c7e2555c71060ca5281ee2cb2c7197f59924a586f27281fea2490f7
-
Size
555KB
-
MD5
269f6da393a0a8c20c7470d5ad2fad18
-
SHA1
e5e73f8ff6e5dd42cd117faef429c1477cf67fc7
-
SHA256
1e9301515c7e2555c71060ca5281ee2cb2c7197f59924a586f27281fea2490f7
-
SHA512
bf8020f495c41a3fbe51e0fdde3a4ae13b7d13d72ca4ac2bec8dc3f826ddf89dc68d2e3ee76c5c54a09169cd04c85055edde1529c23808ae45910cfe23a08c36
-
SSDEEP
12288:lXa8sUK3VkdqLuvghCwOM1bBbOV/dVpTRgTEyai1yA+ued1A4LeB7plZx0p:lq87K3CJgowOMVEV/5TRgTByA+uLH7pU
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1e9301515c7e2555c71060ca5281ee2cb2c7197f59924a586f27281fea2490f7
Files
-
1e9301515c7e2555c71060ca5281ee2cb2c7197f59924a586f27281fea2490f7.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
HWAxCMck Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DrtWJgcR Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�� Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE