Static task
static1
Behavioral task
behavioral1
Sample
d3555c00b46a0c94d6873caa2827219b8a3f8a9f15db83cfce7b770e1aeb938a.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d3555c00b46a0c94d6873caa2827219b8a3f8a9f15db83cfce7b770e1aeb938a.exe
Resource
win10v2004-20240419-en
General
-
Target
d3555c00b46a0c94d6873caa2827219b8a3f8a9f15db83cfce7b770e1aeb938a
-
Size
260KB
-
MD5
4836f393696d0a929964f97d99aeeae9
-
SHA1
4e84ccf74e24c350eac64d850e2e6bf97115dfee
-
SHA256
d3555c00b46a0c94d6873caa2827219b8a3f8a9f15db83cfce7b770e1aeb938a
-
SHA512
7c667d07ca58b72fd772c476f96b730cd6601c0e55401ac8d95af3a1a892bd27ff7ac32da5bec3abf552ee41982d1ff427b583d78d3a8d621d982278f0c0e9cc
-
SSDEEP
3072:HQC/yj5JO3Mn3N+Hu5pbrJKy5StK6qvOEviMSCIaqMX8iOS8zLXW3qITalMHLFbp:wlj7cMn9+OXhKy4K612iXPMX98L6DFus
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d3555c00b46a0c94d6873caa2827219b8a3f8a9f15db83cfce7b770e1aeb938a
Files
-
d3555c00b46a0c94d6873caa2827219b8a3f8a9f15db83cfce7b770e1aeb938a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
VHqxTUpa Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IaDsgWGk Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE