Behavioral task
behavioral1
Sample
10710b242c212a2c56baf19b0f68f444fb1b8c1ce5d11150366cfbcc3088c1ed.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
10710b242c212a2c56baf19b0f68f444fb1b8c1ce5d11150366cfbcc3088c1ed.exe
Resource
win10v2004-20240412-en
General
-
Target
10710b242c212a2c56baf19b0f68f444fb1b8c1ce5d11150366cfbcc3088c1ed
-
Size
2.0MB
-
MD5
b3d58a0b247628b32514a46edc3b5882
-
SHA1
04a0136035909e6732ee397ea9c091579075cc4d
-
SHA256
10710b242c212a2c56baf19b0f68f444fb1b8c1ce5d11150366cfbcc3088c1ed
-
SHA512
1fa5c3d5e541983ec3abdbc6cdf842decda92cd3ed0fa051fa705ee71711fa9e0ef0affa5759d47d84ef387cd9fd99f3712b2c64cc69d681dc6f44a823a3deaa
-
SSDEEP
49152:pcSbobTi5Dj2FuUWdJpiEXePdqA9eLi+YCVU3bAx0H5:GcobTA+oldPiEXkoLi+YCqMyZ
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 10710b242c212a2c56baf19b0f68f444fb1b8c1ce5d11150366cfbcc3088c1ed
Files
-
10710b242c212a2c56baf19b0f68f444fb1b8c1ce5d11150366cfbcc3088c1ed.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.jxmnr Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lpkez Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.g Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.i Size: 512B - Virtual size: 4KB