Static task
static1
Behavioral task
behavioral1
Sample
abc9a2776313c50090b6d3a2cade3215a55fb9bfa089ad12565d00236f2bb629.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
abc9a2776313c50090b6d3a2cade3215a55fb9bfa089ad12565d00236f2bb629.exe
Resource
win10v2004-20240319-en
General
-
Target
abc9a2776313c50090b6d3a2cade3215a55fb9bfa089ad12565d00236f2bb629
-
Size
364KB
-
MD5
ab3c818b2e04a50b35bd8070032a4f59
-
SHA1
532989383568a6ccc19803c305622079fd4bec03
-
SHA256
abc9a2776313c50090b6d3a2cade3215a55fb9bfa089ad12565d00236f2bb629
-
SHA512
419b80a2cd4283bc123ccb03fa3fb83b9af2316f41dad0eb0c89a648d2c9330cf2ef8a332c08e9500b7891d6464a0e75835d39762333c5bba393fdccfcf3408e
-
SSDEEP
1536:JK0KiyLzXF8CvrJ4PBhDP35R6hslProNVU4qNVUrk/9QbfBr+7GwKrPAsqNVU:JXr2h8k6DP3v6hsltOrWKDBr+yJb
Malware Config
Signatures
-
Detects executables built or packed with MPress PE compressor 1 IoCs
resource yara_rule sample INDICATOR_EXE_Packed_MPress -
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource abc9a2776313c50090b6d3a2cade3215a55fb9bfa089ad12565d00236f2bb629
Files
-
abc9a2776313c50090b6d3a2cade3215a55fb9bfa089ad12565d00236f2bb629.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfcd Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.l1 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DUzfAGgU Size: 4KB - Virtual size: 4KB
ctNgtzZD Size: 28KB - Virtual size: 28KB
wGXKLHKi Size: 8KB - Virtual size: 8KB
CFGqoxIF Size: 4KB - Virtual size: 4KB
nKdoXYMi Size: 4KB - Virtual size: 4KB
TJJIMjvz Size: 4KB - Virtual size: 4KB
iEIjrkBs Size: 36KB - Virtual size: 36KB
nQpbKAbx Size: 4KB - Virtual size: 4KB
NvORJvdu Size: 20KB - Virtual size: 20KB
dHDrdXqv Size: 44KB - Virtual size: 44KB