Static task
static1
Behavioral task
behavioral1
Sample
b796694ef8459100925daf815e1cfc90f921a465b68c2ceed367ef75f4793bfa.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
b796694ef8459100925daf815e1cfc90f921a465b68c2ceed367ef75f4793bfa.exe
Resource
win10v2004-20240412-en
General
-
Target
b796694ef8459100925daf815e1cfc90f921a465b68c2ceed367ef75f4793bfa
-
Size
240KB
-
MD5
2a28f34115d1752f2294b9ab3012ddea
-
SHA1
6a9463ce1c74dfca302fbd0fa590bf4c392e874e
-
SHA256
b796694ef8459100925daf815e1cfc90f921a465b68c2ceed367ef75f4793bfa
-
SHA512
25681977233d148d875a2dfa586411d7597b507bbd5b038e3aaddba7caa07dd23e07cdf1bef7ead0826ca0cbb3152764bae90a9736c801ad0bdfe9c810161711
-
SSDEEP
1536:vq5VwWDjDkdTRqHFOn8tIbbeYiuZIFS9bB:vq5ud9qHFO8Kf3rIIbB
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b796694ef8459100925daf815e1cfc90f921a465b68c2ceed367ef75f4793bfa
Files
-
b796694ef8459100925daf815e1cfc90f921a465b68c2ceed367ef75f4793bfa.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
zh82nmub Size: - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
5k48yhfc Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
6ig3kkuo Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ