Static task
static1
Behavioral task
behavioral1
Sample
a2b5d8972338e91616984807c8fa4051b1f9ae8b8f250f3a55f644677f145873.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
a2b5d8972338e91616984807c8fa4051b1f9ae8b8f250f3a55f644677f145873.exe
Resource
win10v2004-20240412-en
General
-
Target
a2b5d8972338e91616984807c8fa4051b1f9ae8b8f250f3a55f644677f145873
-
Size
277KB
-
MD5
86d18b38c62c5c46753680f656e55bf9
-
SHA1
90447cc6545b4b0e471a96913d92d5aad1187d2b
-
SHA256
a2b5d8972338e91616984807c8fa4051b1f9ae8b8f250f3a55f644677f145873
-
SHA512
95e03d84502d0eed1c580d5c3c4cbe0f2d4ef4c42aeb5fd4d5dc3351e4e21a475963ac4c4702c9472cf1954d5ff9abcfcb01b1f0bf20c96febd1d0c191956830
-
SSDEEP
6144:aDOxZXrSHXUTsNUmAzYeCLs7/X8qkH1j8o6F7/maNQE8Dh6E5x:lXa8sNUN/XpkHN815/mLB5x
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a2b5d8972338e91616984807c8fa4051b1f9ae8b8f250f3a55f644677f145873
Files
-
a2b5d8972338e91616984807c8fa4051b1f9ae8b8f250f3a55f644677f145873.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
HWAxCMck Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DrtWJgcR Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�� Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE