Static task
static1
Behavioral task
behavioral1
Sample
fbbfd1c38b0c5807bf41e35f71f816c7aebed9eb66ab0ab045ff1480390dd8fd.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fbbfd1c38b0c5807bf41e35f71f816c7aebed9eb66ab0ab045ff1480390dd8fd.exe
Resource
win10v2004-20240226-en
General
-
Target
fbbfd1c38b0c5807bf41e35f71f816c7aebed9eb66ab0ab045ff1480390dd8fd
-
Size
41KB
-
MD5
0005a043d9aa7a28624d80543c4b5c0e
-
SHA1
32f10c9819bfc3875425e4b3815d47a20da52df0
-
SHA256
fbbfd1c38b0c5807bf41e35f71f816c7aebed9eb66ab0ab045ff1480390dd8fd
-
SHA512
45709df31e425d3dbf30a26bc899143204f010989cd50403f488fdaf1fade55b3237941de9a73213556311462a570b78071df5d5210bd39e0a825439a36d0861
-
SSDEEP
768:geMc5VwWt1jDkbXdnTOyQxHFO+IxX2P5LIbbcPYir2lAqcdF0i095yJ:gq5VwWDjDkdTRqHFOn8tIbbeYiuZIFS2
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fbbfd1c38b0c5807bf41e35f71f816c7aebed9eb66ab0ab045ff1480390dd8fd
Files
-
fbbfd1c38b0c5807bf41e35f71f816c7aebed9eb66ab0ab045ff1480390dd8fd.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
h702zirp Size: - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
4y68axbq Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
d8i5semz Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE