Behavioral task
behavioral1
Sample
82e3a64e0d47f8a790874906d99172d0f9ac6719d2579fb227176365e87066a5.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
82e3a64e0d47f8a790874906d99172d0f9ac6719d2579fb227176365e87066a5.exe
Resource
win10v2004-20240412-en
General
-
Target
82e3a64e0d47f8a790874906d99172d0f9ac6719d2579fb227176365e87066a5
-
Size
728KB
-
MD5
6f2522a6d950dd59402e4a0326196d14
-
SHA1
78990556fd4e225f9c1160fb642e4832ab3a5337
-
SHA256
82e3a64e0d47f8a790874906d99172d0f9ac6719d2579fb227176365e87066a5
-
SHA512
c76673190deb25e31cc8726cf3e4fe3ddbabf701e7f95d3d3787c80eba692d2e367ab4cebf238a2597460ef303f98e4a7c737877c2a7f2c20a9cf02b4a3154dc
-
SSDEEP
6144:OxlZaFDLrItkluXRuBvusFjJemp8dqoOiEzfZiKg:klQ8fXEBvuwjInnLEzRir
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 82e3a64e0d47f8a790874906d99172d0f9ac6719d2579fb227176365e87066a5
Files
-
82e3a64e0d47f8a790874906d99172d0f9ac6719d2579fb227176365e87066a5.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 368KB - Virtual size: 368KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 220KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adate Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE