Behavioral task
behavioral1
Sample
e9221f183c90bf1ee702f535f5174e7e9077b1f95adb777b6ff8ba7cc6bb7f16.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e9221f183c90bf1ee702f535f5174e7e9077b1f95adb777b6ff8ba7cc6bb7f16.exe
Resource
win10v2004-20240419-en
General
-
Target
e9221f183c90bf1ee702f535f5174e7e9077b1f95adb777b6ff8ba7cc6bb7f16
-
Size
222KB
-
MD5
52039d47dee96cf7a30a1b677dbdbeb2
-
SHA1
0763cf9aff0a16631649f802368b7b84e12debe5
-
SHA256
e9221f183c90bf1ee702f535f5174e7e9077b1f95adb777b6ff8ba7cc6bb7f16
-
SHA512
3e511125d4f057b4a778acd64bb58875b434a4d854f1c5655300e83bc412d419c907e9ac485c7554e6c033cf79f56df31a1eac956a66008db1cfd85132cd4705
-
SSDEEP
3072:fnyiQSo1EZGtKgZGtK/PgtU1wAIuZAIuXwFwtd89++:KiQSo1EZGtKgZGtK/CAIuZAIuM9++
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e9221f183c90bf1ee702f535f5174e7e9077b1f95adb777b6ff8ba7cc6bb7f16
Files
-
e9221f183c90bf1ee702f535f5174e7e9077b1f95adb777b6ff8ba7cc6bb7f16.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE