Static task
static1
Behavioral task
behavioral1
Sample
66b85f3b762b087a1ddfaafe3bb8dd2b361340de5328d6f6c0236298ec93659b.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
66b85f3b762b087a1ddfaafe3bb8dd2b361340de5328d6f6c0236298ec93659b.exe
Resource
win10v2004-20240412-en
General
-
Target
66b85f3b762b087a1ddfaafe3bb8dd2b361340de5328d6f6c0236298ec93659b
-
Size
41KB
-
MD5
327644e124bc2dedc4f3b965cbbe2ffe
-
SHA1
a27486ae1749e4ae2aef564777312c0a005bb391
-
SHA256
66b85f3b762b087a1ddfaafe3bb8dd2b361340de5328d6f6c0236298ec93659b
-
SHA512
2fd2ce38b04671c093e1358ae6e0ea61093b098a45cd2a307aa2f30c70faba2cfc5999b18e1e102e2ba8cfbd1d293bd5edd161335956ed36fd06a7cf3d438545
-
SSDEEP
768:6eMc5VwWt1jDkbXdnTOyQxHFO+IxX2P5LIbbcPYir2lAqcdF0i09Cy:6q5VwWDjDkdTRqHFOn8tIbbeYiuZIFSz
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 66b85f3b762b087a1ddfaafe3bb8dd2b361340de5328d6f6c0236298ec93659b
Files
-
66b85f3b762b087a1ddfaafe3bb8dd2b361340de5328d6f6c0236298ec93659b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
j990oyts Size: - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
iv58ehjl Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
51c7ekbq Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE