Behavioral task
behavioral1
Sample
fff97b867e8db74e4675cd87e28459e7c96fe31dcf58e6116e0c643313fa6956.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fff97b867e8db74e4675cd87e28459e7c96fe31dcf58e6116e0c643313fa6956.exe
Resource
win10v2004-20240412-en
General
-
Target
fff97b867e8db74e4675cd87e28459e7c96fe31dcf58e6116e0c643313fa6956
-
Size
127KB
-
MD5
4e2a2cdb2f909cff8b007f35f55216e0
-
SHA1
e5a27b5bddf5b237a0d1d4c92ea0a262d73830c3
-
SHA256
fff97b867e8db74e4675cd87e28459e7c96fe31dcf58e6116e0c643313fa6956
-
SHA512
924ab5bcd6a72e00fd4c43fd1ba9bb12e5f384ea196e477658e36f1dffcc8bdfb7b5f6303f150d960df57acb9a530592044d910488c207095f93df65286db640
-
SSDEEP
1536:t/db4Y4yxmCNu+r/tTujUAsOer7LYj4T9AwbCV1:tlbgMu+rRuSOerXe
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fff97b867e8db74e4675cd87e28459e7c96fe31dcf58e6116e0c643313fa6956
Files
-
fff97b867e8db74e4675cd87e28459e7c96fe31dcf58e6116e0c643313fa6956.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE