Behavioral task
behavioral1
Sample
7bf68f6a6c002e857653b335a51310fa330b51c5bb7dc8b95c73b7092ca4071e.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
7bf68f6a6c002e857653b335a51310fa330b51c5bb7dc8b95c73b7092ca4071e.exe
Resource
win10v2004-20240226-en
General
-
Target
7bf68f6a6c002e857653b335a51310fa330b51c5bb7dc8b95c73b7092ca4071e
-
Size
541KB
-
MD5
0f30980bd7defd384f865f00c7450480
-
SHA1
f6f6c94a8ce8a2ebf2e0173137fced9c744c0d32
-
SHA256
7bf68f6a6c002e857653b335a51310fa330b51c5bb7dc8b95c73b7092ca4071e
-
SHA512
c46a8e4e9b6fe6f6fce68ded0e913b26eb20a4a9e1152047b76978f463ecb73207208e01fe48a9ab9dd2fc8c8bcd3f28808e005b3ab3827abc162cbf8db7e457
-
SSDEEP
12288:0EQoSC+SqszSwwcGEZUQ4pgSdWMNFGhmD7SQPDTpmrrB1Tu:0MqszSwfZUQ4pLWm68PDT0rrB1Tu
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7bf68f6a6c002e857653b335a51310fa330b51c5bb7dc8b95c73b7092ca4071e
Files
-
7bf68f6a6c002e857653b335a51310fa330b51c5bb7dc8b95c73b7092ca4071e.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.jxmnr Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lpkez Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.g Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ