Static task
static1
Behavioral task
behavioral1
Sample
fe90b9b4be7d5e4d8df3e6e9ecc6ec14ea1e9c8d4732fdd5a0b4fd8270175db0.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fe90b9b4be7d5e4d8df3e6e9ecc6ec14ea1e9c8d4732fdd5a0b4fd8270175db0.exe
Resource
win10v2004-20240419-en
General
-
Target
fe90b9b4be7d5e4d8df3e6e9ecc6ec14ea1e9c8d4732fdd5a0b4fd8270175db0
-
Size
710KB
-
MD5
3df2b15e0ba4e046500eab027a2f7396
-
SHA1
df0a2b2ba71f10a0ecba5eeebeca3cc4c9098ee9
-
SHA256
fe90b9b4be7d5e4d8df3e6e9ecc6ec14ea1e9c8d4732fdd5a0b4fd8270175db0
-
SHA512
a9425af70abc85edb305b4a921c1989e882fc08e0984e934ec9167442a5de51a7fa868cb46a23c4f9071e1c155fadd454701c1dafa2c31ea10c83684e658be85
-
SSDEEP
12288:/n8yN0Mr8Zej63hgD1ZiKq2VR8aVtsNWElnv8Pv8WL0:vPuZc63ibp8aPExvEvJg
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe90b9b4be7d5e4d8df3e6e9ecc6ec14ea1e9c8d4732fdd5a0b4fd8270175db0
Files
-
fe90b9b4be7d5e4d8df3e6e9ecc6ec14ea1e9c8d4732fdd5a0b4fd8270175db0.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
FKP0 Size: - Virtual size: 18.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
FKP1 Size: 203KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE