Behavioral task
behavioral1
Sample
2a6e2e417969d473950af5122f42aba5c4e3a3d82c9266267fd0beab2b69f2de.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2a6e2e417969d473950af5122f42aba5c4e3a3d82c9266267fd0beab2b69f2de.exe
Resource
win10v2004-20240412-en
General
-
Target
2a6e2e417969d473950af5122f42aba5c4e3a3d82c9266267fd0beab2b69f2de
-
Size
473KB
-
MD5
7b9e5d192e58c927ba48141143288b36
-
SHA1
615140a6a36127f440683b0c2b86597ea5f6dd06
-
SHA256
2a6e2e417969d473950af5122f42aba5c4e3a3d82c9266267fd0beab2b69f2de
-
SHA512
102051e0bf088acb87e3916c6bb39e7c4f8a170112b52458ffeb77011a40b660dbe3ef455260865c120a5c22790147f445c06d9d2a5b159e18eb7fe18b13b88a
-
SSDEEP
12288:VEQoSScy0DsVO1t03MLp/aUkj6iq3R1jF:V0cn4k1G38p/aeh1jF
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a6e2e417969d473950af5122f42aba5c4e3a3d82c9266267fd0beab2b69f2de
Files
-
2a6e2e417969d473950af5122f42aba5c4e3a3d82c9266267fd0beab2b69f2de.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_BIND
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.g Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.kxvu Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.psfx Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fpugn Size: 512B - Virtual size: 4KB