Static task
static1
Behavioral task
behavioral1
Sample
a4b5a8c782c5ac0fa62aae0f75f1c89b8821b3f5a1453eeb2b89b3a4b9ea5a6e.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a4b5a8c782c5ac0fa62aae0f75f1c89b8821b3f5a1453eeb2b89b3a4b9ea5a6e.exe
Resource
win10v2004-20240412-en
General
-
Target
a4b5a8c782c5ac0fa62aae0f75f1c89b8821b3f5a1453eeb2b89b3a4b9ea5a6e
-
Size
4KB
-
MD5
c34e7405a9e9b4cafaadcc434e793e7c
-
SHA1
a01730d5ddb99cfc0fc11aa0cb0044ae36d5b20c
-
SHA256
a4b5a8c782c5ac0fa62aae0f75f1c89b8821b3f5a1453eeb2b89b3a4b9ea5a6e
-
SHA512
458b02ba45618895298385a5608f914f89ca9368ed2e8338a7d014c2169d4c7595be450bf7a85f2c58a2b7736954b4ef17f0d4fbfd9e85fb8722207ec5fc7115
-
SSDEEP
96:LdvIdSLQPZARC3dCE8Y0Jw5NL6EVwHHKg2:JswdRCNCE8YPWowHHK7
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a4b5a8c782c5ac0fa62aae0f75f1c89b8821b3f5a1453eeb2b89b3a4b9ea5a6e
Files
-
a4b5a8c782c5ac0fa62aae0f75f1c89b8821b3f5a1453eeb2b89b3a4b9ea5a6e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
2246jvyg Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2kx0efbo Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
g104xscl Size: 576B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE