Behavioral task
behavioral1
Sample
8ae4dbe30c930efd5f9336bcf2562b5405528e446f37b90e6adfb77d633882fe.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
8ae4dbe30c930efd5f9336bcf2562b5405528e446f37b90e6adfb77d633882fe.exe
Resource
win10v2004-20240419-en
General
-
Target
8ae4dbe30c930efd5f9336bcf2562b5405528e446f37b90e6adfb77d633882fe
-
Size
822KB
-
MD5
9fc1dd1df6e02afec8ca30f0e18981a5
-
SHA1
c4cb6fa86d708d725cdd8e4be0e8f081a060951b
-
SHA256
8ae4dbe30c930efd5f9336bcf2562b5405528e446f37b90e6adfb77d633882fe
-
SHA512
51c66d8e13208c25f45090f4a329ab1874f87308f0be4e6b5aa98bd30755dcfb2063caf31658c5ab2f974b77538b3a286581fdca77954855de724bf1d4d63bd8
-
SSDEEP
12288:JEyDMhqhV0nN4wlbTt0lNYVUyu9t2xgLGzo7/7NTqoUHmn1UB865s7E:JBV0nNxlbwixnoL7kowU6n
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8ae4dbe30c930efd5f9336bcf2562b5405528e446f37b90e6adfb77d633882fe
Files
-
8ae4dbe30c930efd5f9336bcf2562b5405528e446f37b90e6adfb77d633882fe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_BIND
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.btnj Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.s Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.t Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xq Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE