Static task
static1
Behavioral task
behavioral1
Sample
355d9063e561fa050d9de4175034f9c32203f84965ce68b0a7b9fa11ff1690b9.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
355d9063e561fa050d9de4175034f9c32203f84965ce68b0a7b9fa11ff1690b9.exe
Resource
win10v2004-20240412-en
General
-
Target
355d9063e561fa050d9de4175034f9c32203f84965ce68b0a7b9fa11ff1690b9
-
Size
41KB
-
MD5
2b058069199d0c2319323b38e47e7fab
-
SHA1
18a9b2339d96f62c3ee47e45e2b7200b1ba771c8
-
SHA256
355d9063e561fa050d9de4175034f9c32203f84965ce68b0a7b9fa11ff1690b9
-
SHA512
683ebd7dc36020c9821e8d10dccefa17c7ee6eefec4bad5b090785231f0521062273d45eae35b952575055e7f715a5d6d1eb4ab9ddca5eea5ec0ee2fa1990073
-
SSDEEP
768:aeMc5VwWt1jDkbXdnTOyQxHFO+IxX2P5LIbbcPYir2lAqcdF0i095yJ:aq5VwWDjDkdTRqHFOn8tIbbeYiuZIFS2
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 355d9063e561fa050d9de4175034f9c32203f84965ce68b0a7b9fa11ff1690b9
Files
-
355d9063e561fa050d9de4175034f9c32203f84965ce68b0a7b9fa11ff1690b9.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
z746phtr Size: - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2812ywka Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
z810mbtd Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE