Behavioral task
behavioral1
Sample
4dde68ea0ee97215c9c723122248ac87ece1cb5d8a25e452e97e36d8a5f6ee41.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
4dde68ea0ee97215c9c723122248ac87ece1cb5d8a25e452e97e36d8a5f6ee41.exe
Resource
win10v2004-20240419-en
General
-
Target
4dde68ea0ee97215c9c723122248ac87ece1cb5d8a25e452e97e36d8a5f6ee41
-
Size
448KB
-
MD5
5e1f628ed690cd1a910a769fc52be4d2
-
SHA1
d3ed49b61c646a932ae709fc1011d3151b9a330c
-
SHA256
4dde68ea0ee97215c9c723122248ac87ece1cb5d8a25e452e97e36d8a5f6ee41
-
SHA512
7aef45446fdc7f666c7f28bd710ce842c1870b70b99433425f40710ada897443e5d34c090cc147a580d0ed1012061d387ce37b5d6717e7caa0f1cb9698afffbd
-
SSDEEP
12288:sPKLXq7G4yhjol7Nf2iIfv4G9jOoB74Q+is8s55:sSLgyCl7NZGkKpa
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4dde68ea0ee97215c9c723122248ac87ece1cb5d8a25e452e97e36d8a5f6ee41
Files
-
4dde68ea0ee97215c9c723122248ac87ece1cb5d8a25e452e97e36d8a5f6ee41.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tn Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.f Size: 512B - Virtual size: 4KB