Static task
static1
Behavioral task
behavioral1
Sample
14569ab042b336a29fbac0ee7222a9ba1b4ebe742879d9a342dd196fd85170b3.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
14569ab042b336a29fbac0ee7222a9ba1b4ebe742879d9a342dd196fd85170b3.exe
Resource
win10v2004-20240419-en
General
-
Target
14569ab042b336a29fbac0ee7222a9ba1b4ebe742879d9a342dd196fd85170b3
-
Size
125KB
-
MD5
1aec0af3c8aa8999cbf8c97466dfaafd
-
SHA1
605fff9343cbbf187c60a1460f09c004bba3fbd1
-
SHA256
14569ab042b336a29fbac0ee7222a9ba1b4ebe742879d9a342dd196fd85170b3
-
SHA512
210dac696a85ff18b9baf1d6b8aaded8c90b45f06cf8cea927dad7ae2cb85dfcb115c9bb4a9809d94f269aec4372b6ef1ab662a349aad457f114a0d84d439f93
-
SSDEEP
3072:ZEboFVlGAvwsgbpvYfMTc72L10fPsout:OBzsgbpvnTcyOPsoS
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 14569ab042b336a29fbac0ee7222a9ba1b4ebe742879d9a342dd196fd85170b3
Files
-
14569ab042b336a29fbac0ee7222a9ba1b4ebe742879d9a342dd196fd85170b3.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.hcu Size: - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dhk Size: 123KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE