Behavioral task
behavioral1
Sample
32221e26ec524407eb0b512bdb00ddd103f916fecbbac980d4650e7f8ad37da5.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
32221e26ec524407eb0b512bdb00ddd103f916fecbbac980d4650e7f8ad37da5.exe
Resource
win10v2004-20240412-en
General
-
Target
32221e26ec524407eb0b512bdb00ddd103f916fecbbac980d4650e7f8ad37da5
-
Size
434KB
-
MD5
6297a7a0dbf4a22c147fc5fcb05334f7
-
SHA1
a76a75350dc8bd083d92dfd1a7c9d1f809684db8
-
SHA256
32221e26ec524407eb0b512bdb00ddd103f916fecbbac980d4650e7f8ad37da5
-
SHA512
402a370caea3dd84d90791cba1267b0a2bbecd3ed7a1bea5308661f9ea6ea2b1d64e744ff4dbb693abe19a1ba05f4e934e27db2ebc6c0fe33c3b0920f2996237
-
SSDEEP
12288:As3xSP86lNxuHwJhfLsLx69sarBP1pl5faN:AshSPwHwPExobD5fu
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 32221e26ec524407eb0b512bdb00ddd103f916fecbbac980d4650e7f8ad37da5
Files
-
32221e26ec524407eb0b512bdb00ddd103f916fecbbac980d4650e7f8ad37da5.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 824KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 405KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE