Behavioral task
behavioral1
Sample
54d015127a0d479d25281e1b97099e974a4e26e1471c2b7d8dd1f157b72bc969.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
54d015127a0d479d25281e1b97099e974a4e26e1471c2b7d8dd1f157b72bc969.exe
Resource
win10v2004-20240419-en
General
-
Target
54d015127a0d479d25281e1b97099e974a4e26e1471c2b7d8dd1f157b72bc969
-
Size
620KB
-
MD5
97e6f5a80e1b27d8a1bb4a1843653227
-
SHA1
de5021be17a6c02e286d057056bdd88af4d7233a
-
SHA256
54d015127a0d479d25281e1b97099e974a4e26e1471c2b7d8dd1f157b72bc969
-
SHA512
83abeb7c1862d052c49af7650689c3245452943345878b289b4a91983ccca43ae5338aced3338381e3211977326fdad4e3e52d6d801ddbb9c178a961f82206d9
-
SSDEEP
12288:A61gtabQWMONeeC/s7+H3IqNARN0QJgfzN7a95vqTBjvrEH7o:AuKZOQy+TuXgfzlq5vsrEH7o
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 54d015127a0d479d25281e1b97099e974a4e26e1471c2b7d8dd1f157b72bc969
Files
-
54d015127a0d479d25281e1b97099e974a4e26e1471c2b7d8dd1f157b72bc969.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE