Static task
static1
Behavioral task
behavioral1
Sample
9f92a0ce51ebeb35310514d2a4c66221a8612b88a6409cd0c8b69097542fb0c9.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
9f92a0ce51ebeb35310514d2a4c66221a8612b88a6409cd0c8b69097542fb0c9.exe
Resource
win10v2004-20240226-en
General
-
Target
9f92a0ce51ebeb35310514d2a4c66221a8612b88a6409cd0c8b69097542fb0c9
-
Size
41KB
-
MD5
2d1c8523501b13d15ae15705e7489e93
-
SHA1
8fb8849598f730f0b1e2cbf45bbf9ae72bf5e8b0
-
SHA256
9f92a0ce51ebeb35310514d2a4c66221a8612b88a6409cd0c8b69097542fb0c9
-
SHA512
c367c5b016524a6bb019afc3e0ae37a5cf699649727356b14e83e03dd07e02bcdf62e38423771696a2203dad4ee966bf1206e93f2b071c99c7ce23a805f5922f
-
SSDEEP
768:heMc5VwWt1jDkbXdnTOyQxHFO+IxX2P5LIbbcPYir2lAqcdF0i09Cy:hq5VwWDjDkdTRqHFOn8tIbbeYiuZIFSz
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9f92a0ce51ebeb35310514d2a4c66221a8612b88a6409cd0c8b69097542fb0c9
Files
-
9f92a0ce51ebeb35310514d2a4c66221a8612b88a6409cd0c8b69097542fb0c9.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
692blzeu Size: - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
6978fugq Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
7c47sakr Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE