Static task
static1
Behavioral task
behavioral1
Sample
fa652c9e71a0678df7e95dfb2a5a69d679ec21d1e4f06dd07894751aa03c4947.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fa652c9e71a0678df7e95dfb2a5a69d679ec21d1e4f06dd07894751aa03c4947.exe
Resource
win10v2004-20240419-en
General
-
Target
fa652c9e71a0678df7e95dfb2a5a69d679ec21d1e4f06dd07894751aa03c4947
-
Size
2.0MB
-
MD5
87e49de52ef33b60f959266fbdde6bee
-
SHA1
c4bac36eacbdb3235fec7efca0fc88534e0e74ee
-
SHA256
fa652c9e71a0678df7e95dfb2a5a69d679ec21d1e4f06dd07894751aa03c4947
-
SHA512
0bec4fb8b02d6df962fce1413dddcddd04aa1c3cf21ebb49bfdab09ae8f0fb1dab4fd93805a4275c1b0da642e6e5f38ae48d4cfed9bf9159c5b5fb367be3789b
-
SSDEEP
49152:jMP+M0vAEW4ic9wIunE4hvaL1lwccQ9+gMd:jc90IRc9OUeccnx
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fa652c9e71a0678df7e95dfb2a5a69d679ec21d1e4f06dd07894751aa03c4947
Files
-
fa652c9e71a0678df7e95dfb2a5a69d679ec21d1e4f06dd07894751aa03c4947.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 760KB - Virtual size: 760KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ