Behavioral task
behavioral1
Sample
9e5e92e7fd6b382af969efbf271af3fed4dad99012368cc6128240f9234a0a36.exe
Resource
win7-20240220-en
General
-
Target
9e5e92e7fd6b382af969efbf271af3fed4dad99012368cc6128240f9234a0a36
-
Size
380KB
-
MD5
002dc3f289eed5758ecf754149663b4d
-
SHA1
c580c64a47a8d371ba0d33d8fc29f7e9cbca30fa
-
SHA256
9e5e92e7fd6b382af969efbf271af3fed4dad99012368cc6128240f9234a0a36
-
SHA512
c78f8de4b475f39ef74abe22a4ecfbabbc72f4e744f8cacaab00b1f235ed4c89bf8f9e2f126c49dfcbe7351365aca57adfe518a51269465ea58e10393ad6cd0d
-
SSDEEP
6144:kcm4FmowdHoSphraHcpOaKHpSwp9OD0IbswYTj:y4wFHoS3eFaKHpNKbbswej
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9e5e92e7fd6b382af969efbf271af3fed4dad99012368cc6128240f9234a0a36
Files
-
9e5e92e7fd6b382af969efbf271af3fed4dad99012368cc6128240f9234a0a36.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tkjdelw Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE