Behavioral task
behavioral1
Sample
951f4d9711ec7696b21101b1a0501c61685a1566781fc6d79b21bf240db16f47.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
951f4d9711ec7696b21101b1a0501c61685a1566781fc6d79b21bf240db16f47.exe
Resource
win10v2004-20240419-en
General
-
Target
951f4d9711ec7696b21101b1a0501c61685a1566781fc6d79b21bf240db16f47
-
Size
1.1MB
-
MD5
baf8bd66cdce08ca2c3c0423a31f60d9
-
SHA1
adfb39b2f21930d9bb833e22dd7b38cd5299c7b4
-
SHA256
951f4d9711ec7696b21101b1a0501c61685a1566781fc6d79b21bf240db16f47
-
SHA512
7930490545975252f0fa4a5e432c0dfc832dbd83dc370ff66561ac5321b638ea14be2bcd9d6b72317f5161902a92081162c74d28dd961a5976e09148a6d4c2ad
-
SSDEEP
24576:0sGywjsNDsxhg8oqJyKnd9CSYZqtHGY5RMzzoq50:d5TEhg8oqJyKb8ot1SzV0
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 951f4d9711ec7696b21101b1a0501c61685a1566781fc6d79b21bf240db16f47
Files
-
951f4d9711ec7696b21101b1a0501c61685a1566781fc6d79b21bf240db16f47.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.jxmnr Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lpkez Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.g Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ