Behavioral task
behavioral1
Sample
84944a71616e101aac9eac3c14a61d0458285dc534f665b2c71aa587f3334e93.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
84944a71616e101aac9eac3c14a61d0458285dc534f665b2c71aa587f3334e93.exe
Resource
win10v2004-20240419-en
General
-
Target
84944a71616e101aac9eac3c14a61d0458285dc534f665b2c71aa587f3334e93
-
Size
1.1MB
-
MD5
1783ff1bf772cb7ab2463e6f50c63323
-
SHA1
746f90d4c7d12066115015a1321512748d46438a
-
SHA256
84944a71616e101aac9eac3c14a61d0458285dc534f665b2c71aa587f3334e93
-
SHA512
80c48f5913972546fce8345e14f9a0f77a82d573dfdc814614cad1ac5fcbb53db6244b5adb747515d4a272a98dc7c844ba60a05f3724d5b35a96b0127316bf8f
-
SSDEEP
24576:gvifai3a+Qaa0Qq9SC/qw+ccy40OXsymYt1Oc6v4MgR8+eoRYXXyN26Ssn:mia+I0mC//k2OcZYtB6FgmGYwrR
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 84944a71616e101aac9eac3c14a61d0458285dc534f665b2c71aa587f3334e93
Files
-
84944a71616e101aac9eac3c14a61d0458285dc534f665b2c71aa587f3334e93.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_BIND
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gtcl Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.kxvu Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.psfx Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.oncez Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bsp Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ