Static task
static1
Behavioral task
behavioral1
Sample
021030ac631b5629c7b6515833952a74e278b8ff8a6fe0f06d1e9d91c45d5099.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
021030ac631b5629c7b6515833952a74e278b8ff8a6fe0f06d1e9d91c45d5099.exe
Resource
win10v2004-20240412-en
General
-
Target
021030ac631b5629c7b6515833952a74e278b8ff8a6fe0f06d1e9d91c45d5099
-
Size
937KB
-
MD5
7edd45841e0d78e331def10338f78c82
-
SHA1
d57a96e5bc00f99cf2ab3b7d6b7aa5076b25dada
-
SHA256
021030ac631b5629c7b6515833952a74e278b8ff8a6fe0f06d1e9d91c45d5099
-
SHA512
fb1fbad234b8c7c9a7179faa418f23aa03588e36cc764040393c7a2e97fc4149c153f79e949cf5f3654fe522c351145f303e98490b9522ab8f2ef9dc24c8af8c
-
SSDEEP
24576:lq8NckENwkBO3/69qMRdyX2ZNabiN3CskXLM9gqf:VT/6EMCtiRCskXLMl
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 021030ac631b5629c7b6515833952a74e278b8ff8a6fe0f06d1e9d91c45d5099
Files
-
021030ac631b5629c7b6515833952a74e278b8ff8a6fe0f06d1e9d91c45d5099.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
HWAxCMck Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DrtWJgcR Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�� Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE