Behavioral task
behavioral1
Sample
d2a80b8a26d3c64cb5004b95ffa9442f42cdeab0a6291a3967265694a086e249.exe
Resource
win7-20240221-en
General
-
Target
d2a80b8a26d3c64cb5004b95ffa9442f42cdeab0a6291a3967265694a086e249
-
Size
453KB
-
MD5
c3ceb3ebb2fe957e1e0ba27ce25c671b
-
SHA1
72749564b36c547e54f841d51704113a2a2a11ee
-
SHA256
d2a80b8a26d3c64cb5004b95ffa9442f42cdeab0a6291a3967265694a086e249
-
SHA512
2020c806bd58240227277a6c6bfd74821b3a4852fe9455b2c5d3d440de005efd1f0db1d69240e11d9d028606b0e7e9b1e8879d0b904af5780bbf279e709be566
-
SSDEEP
6144:rcm4FmowdHoSphraHcpOaKHpXfRo0V8JcgE+ezpg1xrloBNTNmT:x4wFHoS3eFaKHpv/VycgE81lgI
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d2a80b8a26d3c64cb5004b95ffa9442f42cdeab0a6291a3967265694a086e249
Files
-
d2a80b8a26d3c64cb5004b95ffa9442f42cdeab0a6291a3967265694a086e249.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tkjdelw Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE