Static task
static1
Behavioral task
behavioral1
Sample
67c4ba482bc978c2a7f7fd4febde24749ab9961004ebebb8f2f798c1783af284.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
67c4ba482bc978c2a7f7fd4febde24749ab9961004ebebb8f2f798c1783af284.exe
Resource
win10v2004-20240412-en
General
-
Target
67c4ba482bc978c2a7f7fd4febde24749ab9961004ebebb8f2f798c1783af284
-
Size
1.7MB
-
MD5
4b0d67c0e794f4e29f7e54e8778ad963
-
SHA1
943c6f06939e46a8377785405f2035d47437a260
-
SHA256
67c4ba482bc978c2a7f7fd4febde24749ab9961004ebebb8f2f798c1783af284
-
SHA512
b481c108f218020c5df44b0f9d6dc195b5a87517d2c6cb73ff6941ac701c4adc8b2c6355722f522c0c6f70dcd157e72bcd190ee174182194b425f443bc583f2d
-
SSDEEP
49152:RXNTawxaOITMIHj/wiKRKR4NM3UgoAebS:RXNaMIHs9RKR4K3UieW
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 67c4ba482bc978c2a7f7fd4febde24749ab9961004ebebb8f2f798c1783af284
Files
-
67c4ba482bc978c2a7f7fd4febde24749ab9961004ebebb8f2f798c1783af284.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
HWAxCMck Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DrtWJgcR Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�� Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE