Static task
static1
Behavioral task
behavioral1
Sample
1233681738e30f4af8e0c0a7bf865c741b158755590d7100f018aeea0b9243a2.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1233681738e30f4af8e0c0a7bf865c741b158755590d7100f018aeea0b9243a2.exe
Resource
win10v2004-20240226-en
General
-
Target
1233681738e30f4af8e0c0a7bf865c741b158755590d7100f018aeea0b9243a2
-
Size
4KB
-
MD5
f112d67d0519ca9dade8ec20d0491268
-
SHA1
6fa4a5e2bedab1015bd9cfa64bc67395e168b1f8
-
SHA256
1233681738e30f4af8e0c0a7bf865c741b158755590d7100f018aeea0b9243a2
-
SHA512
8fee290972b46e08e180c5e5bc027c2c149089d2eb1cc8b78def6502853ebc0cadba5ae424b4b62cb1cc9b4c3075484c16a833b7d05924e56decf65dc308a439
-
SSDEEP
96:LiviIdSLQPZARC3dCE8Y0Jw5NL6EVwHHKg2:mviswdRCNCE8YPWowHHK7
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1233681738e30f4af8e0c0a7bf865c741b158755590d7100f018aeea0b9243a2
Files
-
1233681738e30f4af8e0c0a7bf865c741b158755590d7100f018aeea0b9243a2.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
g101xscl Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2167dxfl Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
1788zgcx Size: 576B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE