Static task
static1
Behavioral task
behavioral1
Sample
241aa8899d0c8c6a05ac3ceaa8a44c55d3941c08ff60d50c5e5dded6221d0b92.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
241aa8899d0c8c6a05ac3ceaa8a44c55d3941c08ff60d50c5e5dded6221d0b92.exe
Resource
win10v2004-20240412-en
General
-
Target
241aa8899d0c8c6a05ac3ceaa8a44c55d3941c08ff60d50c5e5dded6221d0b92
-
Size
41KB
-
MD5
a4ed6480db145d4f8f22bafd6a744c32
-
SHA1
0c12408ee70c294007a13514097a13d135a3fb3e
-
SHA256
241aa8899d0c8c6a05ac3ceaa8a44c55d3941c08ff60d50c5e5dded6221d0b92
-
SHA512
5e98e36d992bf39cf08b7c92eae4159eb9d101627412fc8d17d20b3303f2d103b732528ff12db15a7d91457fe8f4afa981f374d1ea5e825f88dc50902142a2c1
-
SSDEEP
768:6eMc5VwWt1jDkbXdnTOyQxHFO+IxX2P5LIbbcPYir2lAqcdF0i09syJ:6q5VwWDjDkdTRqHFOn8tIbbeYiuZIFSz
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 241aa8899d0c8c6a05ac3ceaa8a44c55d3941c08ff60d50c5e5dded6221d0b92
Files
-
241aa8899d0c8c6a05ac3ceaa8a44c55d3941c08ff60d50c5e5dded6221d0b92.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
27k9iwen Size: - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
27w3zrsj Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
28f6rciv Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE