Static task
static1
Behavioral task
behavioral1
Sample
82f1a9f9d12c219275b596f588fab772ff2f54a82080fe04dbaddf85d44a7e17.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
82f1a9f9d12c219275b596f588fab772ff2f54a82080fe04dbaddf85d44a7e17.exe
Resource
win10v2004-20240419-en
General
-
Target
82f1a9f9d12c219275b596f588fab772ff2f54a82080fe04dbaddf85d44a7e17
-
Size
927KB
-
MD5
a9e8e5384cb5cda5c69023ed02746f64
-
SHA1
cceebb884793456a2dbb19b33b6f6a78df9e2caf
-
SHA256
82f1a9f9d12c219275b596f588fab772ff2f54a82080fe04dbaddf85d44a7e17
-
SHA512
fc889033f1e03ae4dee521d3aec7fa3b55615a0975a8879b1c562c0bd129710d3b853981b39f0026fc70b032736cfd9e3065917bf01f5609a4e6374889a02af6
-
SSDEEP
24576:Wbd+tZe0p4Ek4niOkl/A04szE87JKTvmc:Wbd+PeW4SkZP4sz9Mbz
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 82f1a9f9d12c219275b596f588fab772ff2f54a82080fe04dbaddf85d44a7e17
Files
-
82f1a9f9d12c219275b596f588fab772ff2f54a82080fe04dbaddf85d44a7e17.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
VHqxTUpa Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IaDsgWGk Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE