Static task
static1
Behavioral task
behavioral1
Sample
9969dd48e5d278e6c6ad4d47f4e9bb3b86c775499b793356b2c027cb9af6fefb.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
9969dd48e5d278e6c6ad4d47f4e9bb3b86c775499b793356b2c027cb9af6fefb.exe
Resource
win10v2004-20240412-en
General
-
Target
9969dd48e5d278e6c6ad4d47f4e9bb3b86c775499b793356b2c027cb9af6fefb
-
Size
947KB
-
MD5
29b4c597ba782089b2425dc2a65fc40a
-
SHA1
cd5505929d1d73a3368d00a0b48a9e189ee46a72
-
SHA256
9969dd48e5d278e6c6ad4d47f4e9bb3b86c775499b793356b2c027cb9af6fefb
-
SHA512
5bbd3ae116137071c67711711674b369452f7a94e919aa41f58b4c11fc024401102ce1ee136bde049410bc1ad43617855a3ec6ad1bc2669cd76b37864e7e71ee
-
SSDEEP
24576:lq8H+6n6JYZBSN+HrmLdJXN6GSNcsq7ZQf/+OvT3:m6n6D0rC96XVqKfWmj
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9969dd48e5d278e6c6ad4d47f4e9bb3b86c775499b793356b2c027cb9af6fefb
Files
-
9969dd48e5d278e6c6ad4d47f4e9bb3b86c775499b793356b2c027cb9af6fefb.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
HWAxCMck Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DrtWJgcR Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�� Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE