Static task
static1
Behavioral task
behavioral1
Sample
9b35289f5857b54db6a02145a2888d2401faf6fb386534591f2981b3ad15b60f.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
9b35289f5857b54db6a02145a2888d2401faf6fb386534591f2981b3ad15b60f.exe
Resource
win10v2004-20240412-en
General
-
Target
9b35289f5857b54db6a02145a2888d2401faf6fb386534591f2981b3ad15b60f
-
Size
131KB
-
MD5
71232e209a8bd13a367ba87201c497da
-
SHA1
d55bfea33f81033f9c90c230af77b6a47c4c9f7f
-
SHA256
9b35289f5857b54db6a02145a2888d2401faf6fb386534591f2981b3ad15b60f
-
SHA512
ad339be648dcf101764e00d5e1dd9733324fd031ae902793de610c9eb74f352c3443b8b11fab0d64175c49146d7b8467bd65d23b4ce590e0dd070ec038d104f6
-
SSDEEP
3072:fEboFVlGAvwsgbpvYfMTc72L10fPsout6nn:cBzsgbpvnTcyOPsoS6nn
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9b35289f5857b54db6a02145a2888d2401faf6fb386534591f2981b3ad15b60f
Files
-
9b35289f5857b54db6a02145a2888d2401faf6fb386534591f2981b3ad15b60f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.cmv Size: - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mpv Size: 123KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE