Behavioral task
behavioral1
Sample
9d3d24aba815efefb2586a72537d23c0d3a427e9d053b739d6514f4056a85e06.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
9d3d24aba815efefb2586a72537d23c0d3a427e9d053b739d6514f4056a85e06.exe
Resource
win10v2004-20240419-en
General
-
Target
9d3d24aba815efefb2586a72537d23c0d3a427e9d053b739d6514f4056a85e06
-
Size
1.0MB
-
MD5
93e12a6f1e4e66100ab617761c22bc6e
-
SHA1
5cadbe3094b1bbea9c3912b7f09d52a75fcd4917
-
SHA256
9d3d24aba815efefb2586a72537d23c0d3a427e9d053b739d6514f4056a85e06
-
SHA512
8d9d452d5e595b282f04a40515bc438b201e5c5c7e0cc605750e65d53fe8e9d0d9665493ca619f70a36c06401962750677f1826816e0a3f4e17c01f957df2dbd
-
SSDEEP
24576:sSL3uSXs3Pq5atqEShFtxSVqGYDOUkLLnLHvAcG:sNSXkCEYEIbxSVtLkcG
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9d3d24aba815efefb2586a72537d23c0d3a427e9d053b739d6514f4056a85e06
Files
-
9d3d24aba815efefb2586a72537d23c0d3a427e9d053b739d6514f4056a85e06.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tn Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.f Size: 512B - Virtual size: 4KB