Static task
static1
Behavioral task
behavioral1
Sample
ce59d8c5c96353a2fee44fc031490b4a71b4c4ec324a847a80433a3255b49cb2.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
ce59d8c5c96353a2fee44fc031490b4a71b4c4ec324a847a80433a3255b49cb2.exe
Resource
win10v2004-20240412-en
General
-
Target
ce59d8c5c96353a2fee44fc031490b4a71b4c4ec324a847a80433a3255b49cb2
-
Size
574KB
-
MD5
e27d9bb0abe5dd3a9c210160b9c7dfe6
-
SHA1
755d72701ba4cf21db79e1f0065b22069f186558
-
SHA256
ce59d8c5c96353a2fee44fc031490b4a71b4c4ec324a847a80433a3255b49cb2
-
SHA512
721e69bc384610e0aaea6b15007465b716d9da46fc8edcd55d384051c34a3d80a0793ac6b44e4a63451715644d1b75bebc3c94cc494ee7bfb2cff1f6096cf761
-
SSDEEP
12288:lXa8sSXrEWqwoavZASKJCI7pHtisj+5X29yr30gb6EO9B3:lq8VfxGMyNisj+5X2grkyOX3
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ce59d8c5c96353a2fee44fc031490b4a71b4c4ec324a847a80433a3255b49cb2
Files
-
ce59d8c5c96353a2fee44fc031490b4a71b4c4ec324a847a80433a3255b49cb2.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
HWAxCMck Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DrtWJgcR Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�� Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE