Static task
static1
Behavioral task
behavioral1
Sample
31cf765a52578f7816f69efdc5a56bc9f42d50ef33118157b0aabec5ed7857df.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
31cf765a52578f7816f69efdc5a56bc9f42d50ef33118157b0aabec5ed7857df.exe
Resource
win10v2004-20240412-en
General
-
Target
31cf765a52578f7816f69efdc5a56bc9f42d50ef33118157b0aabec5ed7857df
-
Size
41KB
-
MD5
1403b7a7e7f86cbab3a345d2ea66cbc6
-
SHA1
c877943ecdafb00e0ece8b0759bc82488b337596
-
SHA256
31cf765a52578f7816f69efdc5a56bc9f42d50ef33118157b0aabec5ed7857df
-
SHA512
3158a1f62026f8a66a3d0ac632fe1de2d3161686c8ca11bfab3506b9561027b9f89b3b36d00476ff25fc5d3920d04d0620c144ea2a9c4b2f2a399b551b060d0d
-
SSDEEP
768:EeMc5VwWt1jDkbXdnTOyQxHFO+IxX2P5LIbbcPYir2lAqcdF0i09Cy:Eq5VwWDjDkdTRqHFOn8tIbbeYiuZIFSz
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 31cf765a52578f7816f69efdc5a56bc9f42d50ef33118157b0aabec5ed7857df
Files
-
31cf765a52578f7816f69efdc5a56bc9f42d50ef33118157b0aabec5ed7857df.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
660bwcmw Size: - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
6757fuwi Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
6y10hpce Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE