Behavioral task
behavioral1
Sample
8ad39c4342cc302204dabd298e6909440ba002ccfc6378378959787526eb676e.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
8ad39c4342cc302204dabd298e6909440ba002ccfc6378378959787526eb676e.exe
Resource
win10v2004-20240419-en
General
-
Target
8ad39c4342cc302204dabd298e6909440ba002ccfc6378378959787526eb676e
-
Size
1.4MB
-
MD5
777441c5e8162f8caf4d68776c58574a
-
SHA1
994195cd0012e529c86393535aaac4d3ea885811
-
SHA256
8ad39c4342cc302204dabd298e6909440ba002ccfc6378378959787526eb676e
-
SHA512
a63d9296228cf0ad561db21cf5a850b03f85cf2cf3b5afe1b99d81c3ee8918e4d40aa5b540b08b0556fda30754d6eb19a007412f6a5be5437db9aefd1340d8ae
-
SSDEEP
24576:YoPiVQFfo3hzBOSIhyP3Ak9ok8STVaP+T42qrw+Vmg8eS+6RoJ+L0UYb:Xz14hzBObyPwqok8e0Orqrwuj01U+LS
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8ad39c4342cc302204dabd298e6909440ba002ccfc6378378959787526eb676e
Files
-
8ad39c4342cc302204dabd298e6909440ba002ccfc6378378959787526eb676e.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ktlju Size: 4KB - Virtual size: 4KB
.wu Size: 512B - Virtual size: 4KB