Behavioral task
behavioral1
Sample
684a0c6483ef151d140282fff74e246cda63e97900918d19f8f29bb6c7c9136d.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
684a0c6483ef151d140282fff74e246cda63e97900918d19f8f29bb6c7c9136d.exe
Resource
win10v2004-20240412-en
General
-
Target
684a0c6483ef151d140282fff74e246cda63e97900918d19f8f29bb6c7c9136d
-
Size
1.3MB
-
MD5
63f3a4732b09906b8506e6b27859bbad
-
SHA1
a901c17d70096b1a6cd4c03af086f2c1fc88d0ab
-
SHA256
684a0c6483ef151d140282fff74e246cda63e97900918d19f8f29bb6c7c9136d
-
SHA512
9751b81c265e1646c022c3ec2eb9a08dbe8c854a7fe58d34242cd22c6aa6a7c1f89b7053e6ee74c889a3b76720e58bc08dcd36fa756193a90eece0fd588e6d3c
-
SSDEEP
24576:A8Xpk5s/o8m/x7DzZP6aU9wQkOqvIH2RQlTd0mGCY/fryunwWclIP57h36x6GzBQ:Acpk5p3JNP6zjXqwWRQ3GCY3rdnwWcKt
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 684a0c6483ef151d140282fff74e246cda63e97900918d19f8f29bb6c7c9136d
Files
-
684a0c6483ef151d140282fff74e246cda63e97900918d19f8f29bb6c7c9136d.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.edlwv Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.oh Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE