Static task
static1
Behavioral task
behavioral1
Sample
d6c5edea551bfb35305fe5d763e96efe8687b7748e05c36b7b7eb33e333e922a.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d6c5edea551bfb35305fe5d763e96efe8687b7748e05c36b7b7eb33e333e922a.exe
Resource
win10v2004-20240412-en
General
-
Target
d6c5edea551bfb35305fe5d763e96efe8687b7748e05c36b7b7eb33e333e922a
-
Size
4KB
-
MD5
65f74890714a15708c67df3f95196fe3
-
SHA1
b0cc3fc9e71abb4e3f0b8eec6db8868f434d9ae7
-
SHA256
d6c5edea551bfb35305fe5d763e96efe8687b7748e05c36b7b7eb33e333e922a
-
SHA512
a05722206ea93478d0c74a6f1b0ddd51cefa8e7d465d21e20d5013dfcf13dfee8fde02a98f67e615cc8ea8afc8ff5f42ff61517b72cb53a56a20ea81efb27063
-
SSDEEP
96:LHtIdSLQPZARC3dCE8Y0Jw5NL6EVwHHKg2:ZswdRCNCE8YPWowHHK7
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d6c5edea551bfb35305fe5d763e96efe8687b7748e05c36b7b7eb33e333e922a
Files
-
d6c5edea551bfb35305fe5d763e96efe8687b7748e05c36b7b7eb33e333e922a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
18i0bahn Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
1w63ulkk Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
21l1wges Size: 576B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE