Static task
static1
Behavioral task
behavioral1
Sample
3af18525d6fa712c0b781d905ba79662d3c561edd0c84d3fdbcda1d4f4a47e4e.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
3af18525d6fa712c0b781d905ba79662d3c561edd0c84d3fdbcda1d4f4a47e4e.exe
Resource
win10v2004-20240412-en
General
-
Target
3af18525d6fa712c0b781d905ba79662d3c561edd0c84d3fdbcda1d4f4a47e4e
-
Size
804KB
-
MD5
c5d07b7700811391685d59eac1f54cdd
-
SHA1
37d551754df33cc6236bf10481375c9089a5b731
-
SHA256
3af18525d6fa712c0b781d905ba79662d3c561edd0c84d3fdbcda1d4f4a47e4e
-
SHA512
6d59d6fded78190415dd03a5583ca75637aff172602c94324ea6716623cd77b9b88d3f47bae6dce87467050b8ef1f15b5bea314f3be8c2d53cf8e8a36eb85d30
-
SSDEEP
24576:lq8Olus+G6mjX83zA9JZRuWzRdAgI639XR:CDFYAlRXXfv
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3af18525d6fa712c0b781d905ba79662d3c561edd0c84d3fdbcda1d4f4a47e4e
Files
-
3af18525d6fa712c0b781d905ba79662d3c561edd0c84d3fdbcda1d4f4a47e4e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
HWAxCMck Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DrtWJgcR Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�� Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE