Behavioral task
behavioral1
Sample
8dc3840f2d4278bc8b812bf82ad8c98502093ed261c6785a928249f26f5b2125.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
8dc3840f2d4278bc8b812bf82ad8c98502093ed261c6785a928249f26f5b2125.exe
Resource
win10v2004-20240412-en
General
-
Target
8dc3840f2d4278bc8b812bf82ad8c98502093ed261c6785a928249f26f5b2125
-
Size
1.2MB
-
MD5
2b89b83e9bc9a97f53dcdb2da1b1a58c
-
SHA1
2ea1adc0e764cee8e307495b2bc18d0d95e7a51e
-
SHA256
8dc3840f2d4278bc8b812bf82ad8c98502093ed261c6785a928249f26f5b2125
-
SHA512
52455e3578645cf93562a7e9d36637ee4d176b76dae9fc54846cf460d7cb159a130bcff893b78521757a9d675d26c87221c1a2b8118ff4e9c2eab50f499d7986
-
SSDEEP
24576:VJGclzFNIHGUYIIxE0ffOL+QZsdNTYakdTeg8ZLfWIGlG6eg:JlDIHGUOxlK6LTYaoe7NfBGVx
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8dc3840f2d4278bc8b812bf82ad8c98502093ed261c6785a928249f26f5b2125
Files
-
8dc3840f2d4278bc8b812bf82ad8c98502093ed261c6785a928249f26f5b2125.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_BIND
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.g Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.kxvu Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.psfx Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fpugn Size: 512B - Virtual size: 4KB