Behavioral task
behavioral1
Sample
5c425b4e1eaa968ab7997abbfe96cd22c057bee8c9a14250f44bbf44198d37b9.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
5c425b4e1eaa968ab7997abbfe96cd22c057bee8c9a14250f44bbf44198d37b9.exe
Resource
win10v2004-20240419-en
General
-
Target
5c425b4e1eaa968ab7997abbfe96cd22c057bee8c9a14250f44bbf44198d37b9
-
Size
1.8MB
-
MD5
38451a9719ff744e486feb9d59b703be
-
SHA1
67a52479082f9a6f19bb04616d770d7254fff354
-
SHA256
5c425b4e1eaa968ab7997abbfe96cd22c057bee8c9a14250f44bbf44198d37b9
-
SHA512
669aa32b1ae93ac22c48c41ec13268537ce923a48e17dd5d7b1f550edac7a0809195ec303947cf0690607b0b8d9501ed18723aff5b69a6b92e5d83e666f3b830
-
SSDEEP
24576:ZiJGiAsnOoL20+MskPoxZTN+tqyrXDwo52uCqVNUXFqwCkfXvj+eb0bY7B:ZiAsnOOvBPobpZW2u/VNUXUufXLI87B
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5c425b4e1eaa968ab7997abbfe96cd22c057bee8c9a14250f44bbf44198d37b9
Files
-
5c425b4e1eaa968ab7997abbfe96cd22c057bee8c9a14250f44bbf44198d37b9.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.jxmnr Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.exjvk Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lpkez Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ