Static task
static1
Behavioral task
behavioral1
Sample
90809acf53850e5a3c1c6de79f693360d4656fb8fe59ad13b3a4134a071e4abd.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
90809acf53850e5a3c1c6de79f693360d4656fb8fe59ad13b3a4134a071e4abd.exe
Resource
win10v2004-20240412-en
General
-
Target
90809acf53850e5a3c1c6de79f693360d4656fb8fe59ad13b3a4134a071e4abd
-
Size
178KB
-
MD5
ee0c368c1c8054382fc5c61f661c9713
-
SHA1
d4a8e0c92b2500d7223872985f562459c6f40164
-
SHA256
90809acf53850e5a3c1c6de79f693360d4656fb8fe59ad13b3a4134a071e4abd
-
SHA512
4b26e8ba42a1da3510901a25e18252b738da4bf6bb89fb44e4483b0afa8aa6b9a8a8a8e61927d799feb04b2696b80b8c8cd26522a5eb206986a9e94b17cf47c7
-
SSDEEP
3072:aDOkexJLFdrrXiHXktT4TxSYBf5ysVjXoZk42p/MjwP0okKMdFH0KPk+qWfiaaCA:aDOxZXrSHXUTsr1pp6P21Me0okKkxNKx
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 90809acf53850e5a3c1c6de79f693360d4656fb8fe59ad13b3a4134a071e4abd
Files
-
90809acf53850e5a3c1c6de79f693360d4656fb8fe59ad13b3a4134a071e4abd.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
HWAxCMck Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DrtWJgcR Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�� Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE