Static task
static1
Behavioral task
behavioral1
Sample
f89187e289d7c5d106e83ddecb7c3c2cab985e794d89442c1f511aa35a0dfbd2.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f89187e289d7c5d106e83ddecb7c3c2cab985e794d89442c1f511aa35a0dfbd2.exe
Resource
win10v2004-20240419-en
General
-
Target
f89187e289d7c5d106e83ddecb7c3c2cab985e794d89442c1f511aa35a0dfbd2
-
Size
311KB
-
MD5
ad5186433197d77f21b6727e4d05517f
-
SHA1
2c3313d05ff6683132e3addbe32b6e996c80303b
-
SHA256
f89187e289d7c5d106e83ddecb7c3c2cab985e794d89442c1f511aa35a0dfbd2
-
SHA512
ecc8bd9ea628968d2709f4cbbcd9bdde7e271aa2d3ba2c8ba11072c9b7c3a60c2716599618b040c3d6b8457b2fc4d79c500db0f0aa25c0f5c9edbeb0bcb1ef1d
-
SSDEEP
3072:HQC/yj5JO3MnnG+Hu54LRkgUA1nQZwFGVO4Mqg+WDy:wlj7cMnG+OmLRp1nQ4QLn
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f89187e289d7c5d106e83ddecb7c3c2cab985e794d89442c1f511aa35a0dfbd2
Files
-
f89187e289d7c5d106e83ddecb7c3c2cab985e794d89442c1f511aa35a0dfbd2.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
VHqxTUpa Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IaDsgWGk Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE