Static task
static1
Behavioral task
behavioral1
Sample
169ba5f18f676b43fb1c0963e740bdefee5a50dfce6a2a226604793043aa5aeb.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
169ba5f18f676b43fb1c0963e740bdefee5a50dfce6a2a226604793043aa5aeb.exe
Resource
win10v2004-20240412-en
General
-
Target
169ba5f18f676b43fb1c0963e740bdefee5a50dfce6a2a226604793043aa5aeb
-
Size
402KB
-
MD5
68389cdd6a6d32618183a9d064c7fb87
-
SHA1
d78e9d9771ff46a0ee5f0a891597f3a2643e65a2
-
SHA256
169ba5f18f676b43fb1c0963e740bdefee5a50dfce6a2a226604793043aa5aeb
-
SHA512
ff8977f12bae7a938c6f94955c069fe2cfc135d96e604206aeb03e7be1857676375213387af28367871888728223b588ae58a1297d08560c7ef86091ada8498b
-
SSDEEP
6144:9rTfUHeeSKOS9ccFKk3Y9t9Yl5736ezMLnbJW5:9n8yN0Mr8f3N0nbJW5
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 169ba5f18f676b43fb1c0963e740bdefee5a50dfce6a2a226604793043aa5aeb
Files
-
169ba5f18f676b43fb1c0963e740bdefee5a50dfce6a2a226604793043aa5aeb.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
FKP0 Size: - Virtual size: 18.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
FKP1 Size: 203KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE