Static task
static1
Behavioral task
behavioral1
Sample
4ded3c9f21d8c7b0016fe4239341a581738bb36fb45f3fe336ae5c1b1344a26e.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
4ded3c9f21d8c7b0016fe4239341a581738bb36fb45f3fe336ae5c1b1344a26e.exe
Resource
win10v2004-20240226-en
General
-
Target
4ded3c9f21d8c7b0016fe4239341a581738bb36fb45f3fe336ae5c1b1344a26e
-
Size
1.6MB
-
MD5
775f4b181ab4e9ba3a1f57a81a48ae7c
-
SHA1
fd55bb20e5f9b685f48c71245d39a90f604e6835
-
SHA256
4ded3c9f21d8c7b0016fe4239341a581738bb36fb45f3fe336ae5c1b1344a26e
-
SHA512
cfe7ed2e0a5c0fe348d43e247e8ea9211973ecf2521cedfff5f034401f4f1177380687975175bc27c1b412521a21255d944e9190ca02c9b3d306cb46f7fbb60f
-
SSDEEP
49152:ZAtsBkXWwW7EzADGb/5Oyyb7qgB8lmDvb:TkvNAqb/0F7qgBNDD
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4ded3c9f21d8c7b0016fe4239341a581738bb36fb45f3fe336ae5c1b1344a26e
Files
-
4ded3c9f21d8c7b0016fe4239341a581738bb36fb45f3fe336ae5c1b1344a26e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
HWAxCMck Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DrtWJgcR Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�� Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE