Behavioral task
behavioral1
Sample
919a402947fac175efd5a0131d2a6fb6b0b2b2fd1e6106331250d6263ece90ca.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
919a402947fac175efd5a0131d2a6fb6b0b2b2fd1e6106331250d6263ece90ca.exe
Resource
win10v2004-20240319-en
General
-
Target
919a402947fac175efd5a0131d2a6fb6b0b2b2fd1e6106331250d6263ece90ca
-
Size
823KB
-
MD5
1239565ea625da8ce89b106200af55c7
-
SHA1
a2cb09c96d04ce9c88c2d295c4f86ced31c96407
-
SHA256
919a402947fac175efd5a0131d2a6fb6b0b2b2fd1e6106331250d6263ece90ca
-
SHA512
9e7e8eed76dca946c31eead43854f44ea2cdd67b07e420d7e5ee4bb6dc2bb5dc3e7196c81e1421a286c3ba5d4ff5d1ffdae295ab21a5b40eca013f25b06f1325
-
SSDEEP
12288:gEQoSh9HEBg+1YiukkdL+UzErIJMXPe+5XOoQoy176+78z2ag0q0aBAlBE:gZkmbJdHEc0etBoyN6+Iz9wsE
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 919a402947fac175efd5a0131d2a6fb6b0b2b2fd1e6106331250d6263ece90ca
Files
-
919a402947fac175efd5a0131d2a6fb6b0b2b2fd1e6106331250d6263ece90ca.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_BIND
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gtcl Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.kxvu Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.psfx Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.oncez Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bsp Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ