Static task
static1
Behavioral task
behavioral1
Sample
928e04f6cad7b7c3297e1a70ba34b97a10bdb55d2438f1112550b8ec2e7d5ce5.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
928e04f6cad7b7c3297e1a70ba34b97a10bdb55d2438f1112550b8ec2e7d5ce5.exe
Resource
win10v2004-20240226-en
General
-
Target
928e04f6cad7b7c3297e1a70ba34b97a10bdb55d2438f1112550b8ec2e7d5ce5
-
Size
4KB
-
MD5
e829500076802d4adb9ea52a0109014f
-
SHA1
becdd428bfb7e2f7453b3874a17370e3646a4a41
-
SHA256
928e04f6cad7b7c3297e1a70ba34b97a10bdb55d2438f1112550b8ec2e7d5ce5
-
SHA512
a31e4f5d769dccd41dbca0bc0e4d5679789f636ac5c4813b725e7869f0b6cb35af4d4a1347b3e966ec92e29366dd2beeab317e4104b2346a48f4beda56d87238
-
SSDEEP
96:LkIdSLQPZARC3dCE8Y0Jw5NL6EVwHHKg2:QswdRCNCE8YPWowHHK7
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 928e04f6cad7b7c3297e1a70ba34b97a10bdb55d2438f1112550b8ec2e7d5ce5
Files
-
928e04f6cad7b7c3297e1a70ba34b97a10bdb55d2438f1112550b8ec2e7d5ce5.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
v379pkso Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2445zgcx Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2444zvwt Size: 576B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE