Behavioral task
behavioral1
Sample
1474fad1ed13a50771d042d3de8754d3c4f58ca4c341d566c7eed7ca02875681.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1474fad1ed13a50771d042d3de8754d3c4f58ca4c341d566c7eed7ca02875681.exe
Resource
win10v2004-20240419-en
General
-
Target
1474fad1ed13a50771d042d3de8754d3c4f58ca4c341d566c7eed7ca02875681
-
Size
384KB
-
MD5
d8d20478ef67b177476007a8eecab29f
-
SHA1
0624f8ee8aa1e50cb901262f40094309b93407f5
-
SHA256
1474fad1ed13a50771d042d3de8754d3c4f58ca4c341d566c7eed7ca02875681
-
SHA512
07e24e50819f3552e3f8b996ac87cfe815f40a713fe4758f12a7ad075e2565a53f0b953cd9cac00878c8f2b6d9c6d96f8184f4c4fb1c0bdb74d5e6a49236206e
-
SSDEEP
6144:bPDLCL4Io5R4nM/4r1SQswpGp8W+TGGhPbCFMZSRIgy9GJPtPmIyexDk3:bPKL8qM5wQR+Tvh0TIRGJPtPByeq3
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1474fad1ed13a50771d042d3de8754d3c4f58ca4c341d566c7eed7ca02875681
Files
-
1474fad1ed13a50771d042d3de8754d3c4f58ca4c341d566c7eed7ca02875681.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bvxzt Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.yno Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vzkj Size: 512B - Virtual size: 4KB
.kemyz Size: 512B - Virtual size: 4KB