Behavioral task
behavioral1
Sample
3e2553e6bb9c8ec4aa58f290a7c9362cc3d3cbb98c289e4838cd7aa4644a107c.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
3e2553e6bb9c8ec4aa58f290a7c9362cc3d3cbb98c289e4838cd7aa4644a107c.exe
Resource
win10v2004-20240412-en
General
-
Target
3e2553e6bb9c8ec4aa58f290a7c9362cc3d3cbb98c289e4838cd7aa4644a107c
-
Size
850KB
-
MD5
3b28178b84b820ff1b57b914b85b40ed
-
SHA1
2491fcc930854ad32e22491c63045bc5d18e3064
-
SHA256
3e2553e6bb9c8ec4aa58f290a7c9362cc3d3cbb98c289e4838cd7aa4644a107c
-
SHA512
abcf42bfda8a5574a202f179a25605abb923d8b84c78d414c31a7bce1fa31253ec6e53c3b675c34f7003e1a26a90f57219137e5bd0e3d24dc57c8f1dc3529f62
-
SSDEEP
12288:YEQoSnqh+nXzkFJ/PHf34B+8ByPmAcq5bW4x2HtQX38pMtj4nZZi30V94Jl:YocXQFJnQU8NUxBxStQcPZMkV9O
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e2553e6bb9c8ec4aa58f290a7c9362cc3d3cbb98c289e4838cd7aa4644a107c
Files
-
3e2553e6bb9c8ec4aa58f290a7c9362cc3d3cbb98c289e4838cd7aa4644a107c.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ktlju Size: 4KB - Virtual size: 4KB
.wu Size: 512B - Virtual size: 4KB