Behavioral task
behavioral1
Sample
cb772e689cb041d110b81d2cced96076b195addc821193835823e2272a92d56e.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
cb772e689cb041d110b81d2cced96076b195addc821193835823e2272a92d56e.exe
Resource
win10v2004-20240412-en
General
-
Target
cb772e689cb041d110b81d2cced96076b195addc821193835823e2272a92d56e
-
Size
2.0MB
-
MD5
abd443590daaa3fdac20e576079ccb5c
-
SHA1
77a43f47747f85fd246e3ff3765fe88f3a31814e
-
SHA256
cb772e689cb041d110b81d2cced96076b195addc821193835823e2272a92d56e
-
SHA512
47a6abb586ec1cdf04390def4a6f2ff8084d0fcc2451e80af7a8df7a66ba10a222d304c761e1a4323ce5ca5b22093f705ec2ece0d148875b81b42850a299a075
-
SSDEEP
49152:Nn/cuBcvyzlSeI1g8WIoDWEJypP7LlYLf/Wwr70ySpU+KOjC:N/cuBsy8g8zcWGytHqD/TP0ySpTKX
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cb772e689cb041d110b81d2cced96076b195addc821193835823e2272a92d56e
Files
-
cb772e689cb041d110b81d2cced96076b195addc821193835823e2272a92d56e.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bvxzt Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.yno Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vzkj Size: 512B - Virtual size: 4KB
.lygia Size: 512B - Virtual size: 4KB
.o Size: 512B - Virtual size: 4KB