Static task
static1
Behavioral task
behavioral1
Sample
448b99c9fd395fb94fe7e06e154c00f449d4e35d0855b9ec2d45b826390919d6.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
448b99c9fd395fb94fe7e06e154c00f449d4e35d0855b9ec2d45b826390919d6.exe
Resource
win10v2004-20240412-en
General
-
Target
448b99c9fd395fb94fe7e06e154c00f449d4e35d0855b9ec2d45b826390919d6
-
Size
121KB
-
MD5
333d0904e66795d333a215b8ebde4da8
-
SHA1
24df9ed18db1bf27d6b1299de8f9252428ea49fe
-
SHA256
448b99c9fd395fb94fe7e06e154c00f449d4e35d0855b9ec2d45b826390919d6
-
SHA512
dcabcaaa12d2fb72aa368660bbdf43639bd52fc6c419e9b1f403ce74d89a0c6f3f8ca3491b40c03ddbbd6051bed039541c15345aff64e21315dd5a1935a81322
-
SSDEEP
3072:HQC/yj5JO3MnlgG+8psgozqC4O/jHxo6l0PTBuJBQbRQ5WFV:wlj7cMn3+8ps5N/jHxn0l7xFV
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 448b99c9fd395fb94fe7e06e154c00f449d4e35d0855b9ec2d45b826390919d6
Files
-
448b99c9fd395fb94fe7e06e154c00f449d4e35d0855b9ec2d45b826390919d6.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
VHqxTUpa Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IaDsgWGk Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE