Behavioral task
behavioral1
Sample
1c5147105816fff75624d91d709f0e451d89b84635996de5fab5f967950f9b71.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1c5147105816fff75624d91d709f0e451d89b84635996de5fab5f967950f9b71.exe
Resource
win10v2004-20240226-en
General
-
Target
1c5147105816fff75624d91d709f0e451d89b84635996de5fab5f967950f9b71
-
Size
1.8MB
-
MD5
3844a849c2504b42ed7647abba4d6f0e
-
SHA1
831df63fe97f389d8aee2f0dfc08f90d39cea8a2
-
SHA256
1c5147105816fff75624d91d709f0e451d89b84635996de5fab5f967950f9b71
-
SHA512
e5686c4b860f0bf89ddbd9c9f283528e3f06349a016ce00d7599fe39a8d9f5c61e60f66a7dd99f2ec4d6ba3130911420e1976e8a74feb8a0f4f8a688c8ce91c4
-
SSDEEP
24576:YocMaIFxz2M360AnY0AGNduStJnkLF/Bwq7Qg04pZXFcnJ1dR+VO5UYFfQ3h1vi9:XcMaIFx6GHUCLF/5IUksoiYkfKzx
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1c5147105816fff75624d91d709f0e451d89b84635996de5fab5f967950f9b71
Files
-
1c5147105816fff75624d91d709f0e451d89b84635996de5fab5f967950f9b71.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ktlju Size: 4KB - Virtual size: 4KB
.wu Size: 512B - Virtual size: 4KB