Behavioral task
behavioral1
Sample
fad09cf38bc33524b5faf6d3d260fc6cc19389d7d42b5d106746db3dc3a64d2e.exe
Resource
win7-20240221-en
General
-
Target
fad09cf38bc33524b5faf6d3d260fc6cc19389d7d42b5d106746db3dc3a64d2e
-
Size
808KB
-
MD5
2aa689a92ea1c8db99d3090d942ede90
-
SHA1
8097565752bc0395acca6f41271016cfc5c1c927
-
SHA256
fad09cf38bc33524b5faf6d3d260fc6cc19389d7d42b5d106746db3dc3a64d2e
-
SHA512
9261c9c2f55af3346c5492f9b783ce0d7e04ed2283935a97dde3eec23456045303f7290adfbc368321b4deff2ce8fe9eebedab23c71a62f244007698a352c593
-
SSDEEP
24576:wNKknRIuR+YpUPa5klxublwKFd+SiiDepN4Q:antYYpUiYuvFd8iu4Q
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fad09cf38bc33524b5faf6d3d260fc6cc19389d7d42b5d106746db3dc3a64d2e
Files
-
fad09cf38bc33524b5faf6d3d260fc6cc19389d7d42b5d106746db3dc3a64d2e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 41KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE