Static task
static1
Behavioral task
behavioral1
Sample
4de0c17a99653789de01c16f97464b74222672ea3a56b017410c06b3655d6702.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
4de0c17a99653789de01c16f97464b74222672ea3a56b017410c06b3655d6702.exe
Resource
win10v2004-20240419-en
General
-
Target
4de0c17a99653789de01c16f97464b74222672ea3a56b017410c06b3655d6702
-
Size
179KB
-
MD5
1d1d930f4d00d834c05df314d8d67bc8
-
SHA1
c8755ecec88d8f3c10967b9b7156c32639a4993a
-
SHA256
4de0c17a99653789de01c16f97464b74222672ea3a56b017410c06b3655d6702
-
SHA512
cab1750c5252018f3636a1a9f90b294e4b8c598f7c4f6a9e92653e0c4c6b0a38485794926e7f389bee95eca0bb8ae8be3d2ef4042800d3e94ecb7bb6427efbd3
-
SSDEEP
384:NnIY3512Z+UM3EN4rrTRqponCJTEycsMHRQ+VjrdQLXXJlhlyi8QCkHs8wNLqWew:qK9UNkrTRqponVtkXJTcBkHXetso
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4de0c17a99653789de01c16f97464b74222672ea3a56b017410c06b3655d6702
Files
-
4de0c17a99653789de01c16f97464b74222672ea3a56b017410c06b3655d6702.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
rUGnmMhn Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
XdylwLzm Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�3G. Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE