Behavioral task
behavioral1
Sample
b8fab6df47a3ae89f9807ed129b4c2b7686f977e20f2a4b17d4c0bfe2383d261.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b8fab6df47a3ae89f9807ed129b4c2b7686f977e20f2a4b17d4c0bfe2383d261.exe
Resource
win10v2004-20240419-en
General
-
Target
b8fab6df47a3ae89f9807ed129b4c2b7686f977e20f2a4b17d4c0bfe2383d261
-
Size
1.8MB
-
MD5
39a4847d1817879dca9043f11b6fd7ed
-
SHA1
bd36bafeac506ddd16e47c69eb321347e32ea4e5
-
SHA256
b8fab6df47a3ae89f9807ed129b4c2b7686f977e20f2a4b17d4c0bfe2383d261
-
SHA512
edccb09bd95226217a6bb8e45f346d30b391ddbf938514ce451f286cbfbda99539599ccf655c5918666b0d662c332864326a9f1f7d02a89df8bd8d32a1bf5dff
-
SSDEEP
49152:FAhzebfitwQ9irtGPunvsbOqKvj2g+uI534ad7RF:FAhzeZEWtG3bOqKv6g+u8DF
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b8fab6df47a3ae89f9807ed129b4c2b7686f977e20f2a4b17d4c0bfe2383d261
Files
-
b8fab6df47a3ae89f9807ed129b4c2b7686f977e20f2a4b17d4c0bfe2383d261.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qhx Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sy Size: 512B - Virtual size: 4KB