Behavioral task
behavioral1
Sample
b4c425703ec55bede0314e1e6a98291427f92a17cd5bc74e0d6f7e39e7b71319.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
b4c425703ec55bede0314e1e6a98291427f92a17cd5bc74e0d6f7e39e7b71319.exe
Resource
win10v2004-20240412-en
General
-
Target
b4c425703ec55bede0314e1e6a98291427f92a17cd5bc74e0d6f7e39e7b71319
-
Size
425KB
-
MD5
3e1e19b4f442aa8e669059e52f93c640
-
SHA1
64b304ceb8958a58335177fa1630d10317a858dc
-
SHA256
b4c425703ec55bede0314e1e6a98291427f92a17cd5bc74e0d6f7e39e7b71319
-
SHA512
e3d674c2078220da63dd1ecb10dc7acf5114d8306da6c250b24b5544429bdc88417a2d4c16aeffaf4448881733acbf729297b83ee78db0af0d90582f07f646d2
-
SSDEEP
6144:ah/p9pNTUTf9TPiDrerl3qipTWIIjL8ve/2Q6c0:aj9pNTUTpPiyJLsjL8veuQ6c0
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b4c425703ec55bede0314e1e6a98291427f92a17cd5bc74e0d6f7e39e7b71319
Files
-
b4c425703ec55bede0314e1e6a98291427f92a17cd5bc74e0d6f7e39e7b71319.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 336KB - Virtual size: 336KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 74KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE