Static task
static1
Behavioral task
behavioral1
Sample
6220a445563bfb9f4bd3e7c199d685a201c82df0d00a194a518aa52ab9370191.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
6220a445563bfb9f4bd3e7c199d685a201c82df0d00a194a518aa52ab9370191.exe
Resource
win10v2004-20240226-en
General
-
Target
6220a445563bfb9f4bd3e7c199d685a201c82df0d00a194a518aa52ab9370191
-
Size
41KB
-
MD5
70408b748e9cbdf3534d0fced1343b22
-
SHA1
d01f1e9556b20c1538f55a9f8896dac0b609f3ec
-
SHA256
6220a445563bfb9f4bd3e7c199d685a201c82df0d00a194a518aa52ab9370191
-
SHA512
e09e7071f83c56f41f815faa58d6aa1bb89e6f8b67137efaa31640e7c6dac637fa244a1c2174f7fa3a18ec14da7ff62e77ade17a91d2aa943c55d472eeba3fcb
-
SSDEEP
768:xeMc5VwWt1jDkbXdnTOyQxHFO+IxX2P5LIbbcPYir2lAqcdF0i09sy:xq5VwWDjDkdTRqHFOn8tIbbeYiuZIFSl
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6220a445563bfb9f4bd3e7c199d685a201c82df0d00a194a518aa52ab9370191
Files
-
6220a445563bfb9f4bd3e7c199d685a201c82df0d00a194a518aa52ab9370191.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
7005rjbf Size: - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
h863ylek Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
6f29ewhl Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE