Behavioral task
behavioral1
Sample
5f261224cc4e2798920a8b18430c3538d05428614246bbc179ca71d79234f401.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
5f261224cc4e2798920a8b18430c3538d05428614246bbc179ca71d79234f401.exe
Resource
win10v2004-20240412-en
General
-
Target
5f261224cc4e2798920a8b18430c3538d05428614246bbc179ca71d79234f401
-
Size
192KB
-
MD5
3afc1908066f14aee8400c652ae6cb48
-
SHA1
ce944dfa454566426558623efa5b966383640f31
-
SHA256
5f261224cc4e2798920a8b18430c3538d05428614246bbc179ca71d79234f401
-
SHA512
f2cad1b6e8d983b2051b4a040e7e3fb1be09df7a528c9b7dd07c72059ed38f0fbc883004ac72915e4953937759889a1d17371517a64cd0dda45c72b485a4dd3b
-
SSDEEP
3072:SKcWmjRrz3qYwInP9TDeaG/XnalTQqqyg7BENpu199znUXE75Co91lwSal:hGcgdKl/Xalc5y+1PznQEFffW
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5f261224cc4e2798920a8b18430c3538d05428614246bbc179ca71d79234f401
Files
-
5f261224cc4e2798920a8b18430c3538d05428614246bbc179ca71d79234f401.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE