Behavioral task
behavioral1
Sample
e825fccd0334168f2d145783411caa6250d940877eb8003406ca6845a8a5c2dc.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e825fccd0334168f2d145783411caa6250d940877eb8003406ca6845a8a5c2dc.exe
Resource
win10v2004-20240412-en
General
-
Target
e825fccd0334168f2d145783411caa6250d940877eb8003406ca6845a8a5c2dc
-
Size
2.0MB
-
MD5
9b03c783c30ebbd3fd2783862222a2d3
-
SHA1
8563340b9d23b32f28ce4bb96e87cf617b136ae5
-
SHA256
e825fccd0334168f2d145783411caa6250d940877eb8003406ca6845a8a5c2dc
-
SHA512
59d280f9c8d693686f90683f2618dd9e1539ac377e8016cfe41b640b4d701fe724136cb62e96207aa012e0e4ec5a3f566aed2ab21b5b587c4b98e39710e5ad7c
-
SSDEEP
49152:PoId3vfs/kpok3uGYra+0As38s0cc7Bw+XtKU0yM7M:PoI9fsspoEujy38s0cwi+dKvyMw
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e825fccd0334168f2d145783411caa6250d940877eb8003406ca6845a8a5c2dc
Files
-
e825fccd0334168f2d145783411caa6250d940877eb8003406ca6845a8a5c2dc.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_BIND
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.btnj Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.s Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.t Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xq Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE