Static task
static1
Behavioral task
behavioral1
Sample
6eb752286d43328b7236e6e3e00f6a62240cb61e8b61acdf0a416685a7bc59f0.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
6eb752286d43328b7236e6e3e00f6a62240cb61e8b61acdf0a416685a7bc59f0.exe
Resource
win10v2004-20240419-en
General
-
Target
6eb752286d43328b7236e6e3e00f6a62240cb61e8b61acdf0a416685a7bc59f0
-
Size
459KB
-
MD5
db49c33110101b2a0328d6c6e140e217
-
SHA1
c822460e502adc0c62c8313c52995406dec1f36a
-
SHA256
6eb752286d43328b7236e6e3e00f6a62240cb61e8b61acdf0a416685a7bc59f0
-
SHA512
1a58c726516af6a0800ca2f26261d815825b95964bf241493774a26fadd0afdfb207d6cea2d8112dc7d3b886928b0b0618ebb5621488072d65ae044e39ff96d5
-
SSDEEP
12288:lXa8s3Rh747EcHlUVYRHV5nFbAnNgyG++rufMC:lq84h7a3HaEHjnFbqqyG++i0C
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
Processes:
resource yara_rule sample UPX -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 6eb752286d43328b7236e6e3e00f6a62240cb61e8b61acdf0a416685a7bc59f0
Files
-
6eb752286d43328b7236e6e3e00f6a62240cb61e8b61acdf0a416685a7bc59f0.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
HWAxCMck Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DrtWJgcR Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�� Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE