Behavioral task
behavioral1
Sample
00ba2f519c93f574f8b013d28b726e2ae2d5b90d147fc8b5e2346dcd98708e07.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
00ba2f519c93f574f8b013d28b726e2ae2d5b90d147fc8b5e2346dcd98708e07.exe
Resource
win10v2004-20240412-en
General
-
Target
00ba2f519c93f574f8b013d28b726e2ae2d5b90d147fc8b5e2346dcd98708e07
-
Size
6.5MB
-
MD5
3c6988fc0c004fb9bcf8735a8312a183
-
SHA1
b12823735e9b7789092e0249ac59d72c387921fc
-
SHA256
00ba2f519c93f574f8b013d28b726e2ae2d5b90d147fc8b5e2346dcd98708e07
-
SHA512
02a3a5bad39dc994b6fca6582cb6355a446397fa2bf5818147bc382a5c72db68f6cd858757f530a7a2990719f64686c4cf6eaf0b6f6ed8475b43b8f3cda3a568
-
SSDEEP
196608:jJdtrafsgXql1TWb6QmeixpTFztwrxnh5ER2f:5ob81TWeauTP0dDf
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 00ba2f519c93f574f8b013d28b726e2ae2d5b90d147fc8b5e2346dcd98708e07
Files
-
00ba2f519c93f574f8b013d28b726e2ae2d5b90d147fc8b5e2346dcd98708e07.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 436KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 48KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 367KB - Virtual size: 368KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE