Static task
static1
Behavioral task
behavioral1
Sample
0b5c3bb8ae1e3d7fa049f9eeebc048806c57c60c535f8f2e0f33562d98045985.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0b5c3bb8ae1e3d7fa049f9eeebc048806c57c60c535f8f2e0f33562d98045985.exe
Resource
win10v2004-20240226-en
General
-
Target
0b5c3bb8ae1e3d7fa049f9eeebc048806c57c60c535f8f2e0f33562d98045985
-
Size
118KB
-
MD5
229104a45d53958687c667e970a24f20
-
SHA1
a5803d3540578d303f234325edab0ec4f5981d07
-
SHA256
0b5c3bb8ae1e3d7fa049f9eeebc048806c57c60c535f8f2e0f33562d98045985
-
SHA512
483bdd1cfeb6bc5ed1887055bd5e136bac2802fc6fa95f3f6db92b264b9dd8747d83b2eabf9874ffd47091d923a8b7386d3b76a40c4815b474c3007c2b22e5fc
-
SSDEEP
3072:KOjWuyt0ZsqsXOKofHfHTXQLzgvnzHPowYbvrjD/L7QPbg/Dr0T3rnXLHf7zjPPo:KIs9OKofHfHTXQLzgvnzHPowYbvrjD/h
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b5c3bb8ae1e3d7fa049f9eeebc048806c57c60c535f8f2e0f33562d98045985
Files
-
0b5c3bb8ae1e3d7fa049f9eeebc048806c57c60c535f8f2e0f33562d98045985.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
213llvva Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2184wlsm Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
24xwwpvi Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE