Behavioral task
behavioral1
Sample
9891b83d58c81af530a01cc4fc05b4457ca54097e86310b1af3ccdeeada68965.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
9891b83d58c81af530a01cc4fc05b4457ca54097e86310b1af3ccdeeada68965.exe
Resource
win10v2004-20240419-en
General
-
Target
9891b83d58c81af530a01cc4fc05b4457ca54097e86310b1af3ccdeeada68965
-
Size
129KB
-
MD5
f24a468449a1560eacae362470d9ea5c
-
SHA1
81afdb946ccdb8d88b847c27df6d53336e051f55
-
SHA256
9891b83d58c81af530a01cc4fc05b4457ca54097e86310b1af3ccdeeada68965
-
SHA512
8a64bc4159a075b960efea2ea487a56fca7d5120b8e4f4cdad37b3eb1367756a50a754de819fd74e61bb96cbe86d04f1d46d0a50649cd10f118a84c9f6f42aeb
-
SSDEEP
3072:+nymCAIuZAIuYSMjoqtMHfhf5SskhZj1hcaEWAIy+S:JmCAIuZAIuDMVtM/XSlZj1hcaEWAIy+S
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9891b83d58c81af530a01cc4fc05b4457ca54097e86310b1af3ccdeeada68965
Files
-
9891b83d58c81af530a01cc4fc05b4457ca54097e86310b1af3ccdeeada68965.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE