Behavioral task
behavioral1
Sample
8724460f5ff0475ed3ef5e5f902d9f96cc700573b9cd8f0eb27f3a9ffbc9a819.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
8724460f5ff0475ed3ef5e5f902d9f96cc700573b9cd8f0eb27f3a9ffbc9a819.exe
Resource
win10v2004-20240412-en
General
-
Target
8724460f5ff0475ed3ef5e5f902d9f96cc700573b9cd8f0eb27f3a9ffbc9a819
-
Size
1.5MB
-
MD5
866b10e066f512990deb38ed30ef055b
-
SHA1
cf0768a16138b310b4e9b9961bbc0893ec15c821
-
SHA256
8724460f5ff0475ed3ef5e5f902d9f96cc700573b9cd8f0eb27f3a9ffbc9a819
-
SHA512
1b7864d4037d1b1b15badd2c28090500615c04ae649f32865678d74b67528d9d3682ead84a65df60ef8ced100bc8370969c5e7b43458b1423cf40ccd2d0a621b
-
SSDEEP
24576:YiVgwiT4u1SPc4UTOOJQ8G8wKepJ3DfgnzpKUeEap6CiJ/tIJLHB:xVgwiEE39TR/G8IputKUw6CiJ/0
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8724460f5ff0475ed3ef5e5f902d9f96cc700573b9cd8f0eb27f3a9ffbc9a819
Files
-
8724460f5ff0475ed3ef5e5f902d9f96cc700573b9cd8f0eb27f3a9ffbc9a819.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ktlju Size: 512B - Virtual size: 4KB
.wu Size: 512B - Virtual size: 4KB
.shik Size: 512B - Virtual size: 4KB
.nbd Size: 512B - Virtual size: 4KB