Behavioral task
behavioral1
Sample
cf120c7295cb9b5715e563ee8b3c6739eba5e2977fa41f495e180f1c516c1c59.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cf120c7295cb9b5715e563ee8b3c6739eba5e2977fa41f495e180f1c516c1c59.exe
Resource
win10v2004-20240419-en
General
-
Target
cf120c7295cb9b5715e563ee8b3c6739eba5e2977fa41f495e180f1c516c1c59
-
Size
1.2MB
-
MD5
98f2407bf4df32d8e9a34bd997233f9d
-
SHA1
f6711601a39fd3c3b40565568336b62e7067ea0c
-
SHA256
cf120c7295cb9b5715e563ee8b3c6739eba5e2977fa41f495e180f1c516c1c59
-
SHA512
2ede07e789234e747b521debbb65058719796b7741bd412acd868a96b119c3095f7d8f9e1e255d3580dcbd2b6f5138d948d23c9793a4b443f3de68be1a1481a6
-
SSDEEP
24576:yqylFH50Dv6RwyeQvt6ot0h9HyrOmiruA3p:JylFHUv6ReIt0jSrOp
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cf120c7295cb9b5715e563ee8b3c6739eba5e2977fa41f495e180f1c516c1c59
Files
-
cf120c7295cb9b5715e563ee8b3c6739eba5e2977fa41f495e180f1c516c1c59.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 848KB - Virtual size: 848KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 373KB - Virtual size: 376KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE