Static task
static1
Behavioral task
behavioral1
Sample
47742ac67fe8dda835a1f930f36fc15162b390505dcbe538c0e2c181c6c39ee1.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
47742ac67fe8dda835a1f930f36fc15162b390505dcbe538c0e2c181c6c39ee1.exe
Resource
win10v2004-20240412-en
General
-
Target
47742ac67fe8dda835a1f930f36fc15162b390505dcbe538c0e2c181c6c39ee1
-
Size
1.8MB
-
MD5
f4b5c947597145bbb581e85080304c81
-
SHA1
2228b9e0c965d25f0f9620c69b00553abe9bd29b
-
SHA256
47742ac67fe8dda835a1f930f36fc15162b390505dcbe538c0e2c181c6c39ee1
-
SHA512
0c49406a496d58d1aa101616145b5df0ed465d73a02e5187fbccce59553da3b64154705245c4d987d7edd25557e5cb2b1d559af458e1dc3c103a4b987efff7ea
-
SSDEEP
49152:yNPVbiSqCZEjmK4jZK4I/bDDXmm2i+MvHPH8SLveNcPoOu:UHqKEyK4jm/XmY+M38SLuD
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 47742ac67fe8dda835a1f930f36fc15162b390505dcbe538c0e2c181c6c39ee1
Files
-
47742ac67fe8dda835a1f930f36fc15162b390505dcbe538c0e2c181c6c39ee1.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
HWAxCMck Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DrtWJgcR Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�� Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE