Static task
static1
Behavioral task
behavioral1
Sample
9173e524d4430bff6d28a388861a457cfd5c01b8a531e3cd348c3c3392ed130b.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
9173e524d4430bff6d28a388861a457cfd5c01b8a531e3cd348c3c3392ed130b.exe
Resource
win10v2004-20240412-en
General
-
Target
9173e524d4430bff6d28a388861a457cfd5c01b8a531e3cd348c3c3392ed130b
-
Size
50KB
-
MD5
c7e893ad80449e5b15a2392cd8fe8905
-
SHA1
3d868496a4036abb6673b8a4df3f9fa970585bb1
-
SHA256
9173e524d4430bff6d28a388861a457cfd5c01b8a531e3cd348c3c3392ed130b
-
SHA512
4ddd399bd60b0f3fdec3dc6707f9cb14ecdb29f3c93e65b4ed861cf0fc087a9f18e63e420c46d5cb502b063321d72479640c13c12e22d1d42cffaf7597e81b2b
-
SSDEEP
768:DSxam3Usjr3RIWifODu5fyNHYrS0CNVjvCnbcuyD7UVuQI5noK:DRsjdIZfaif4YrxCjjKnouy8VzK
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9173e524d4430bff6d28a388861a457cfd5c01b8a531e3cd348c3c3392ed130b
Files
-
9173e524d4430bff6d28a388861a457cfd5c01b8a531e3cd348c3c3392ed130b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 64KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ