Static task
static1
Behavioral task
behavioral1
Sample
6d242492fbfd59a127cda3ea5be5964fa5a4c16b4e767cf0f045c4f73eb5f559.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
6d242492fbfd59a127cda3ea5be5964fa5a4c16b4e767cf0f045c4f73eb5f559.exe
Resource
win10v2004-20240226-en
General
-
Target
6d242492fbfd59a127cda3ea5be5964fa5a4c16b4e767cf0f045c4f73eb5f559
-
Size
240KB
-
MD5
3d25701206045c1b2060dcd24256afca
-
SHA1
0d587ca2cc78f8c18d8142cf4dd3fd70ce7d78c3
-
SHA256
6d242492fbfd59a127cda3ea5be5964fa5a4c16b4e767cf0f045c4f73eb5f559
-
SHA512
2da07ae827ad46c103313c582f04ef573583571efb15e6f0853dcfd52fe6661fd38713e27a297f8d6004b5d249a16720872866c3a20ac8a4694fbeb69ccaa337
-
SSDEEP
1536:/q5VwWDjDkdTRqHFOn8tIbbeYiuZIFS9bB:/q5ud9qHFO8Kf3rIIbB
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6d242492fbfd59a127cda3ea5be5964fa5a4c16b4e767cf0f045c4f73eb5f559
Files
-
6d242492fbfd59a127cda3ea5be5964fa5a4c16b4e767cf0f045c4f73eb5f559.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
xh73kzsz Size: - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
v1f7kdvv Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
6124iwgz Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ