Static task
static1
Behavioral task
behavioral1
Sample
b4068999c5c194106307e05446bbd8392a6e6ca6ff82c91c9cf70340b9dab645.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
b4068999c5c194106307e05446bbd8392a6e6ca6ff82c91c9cf70340b9dab645.exe
Resource
win10v2004-20240419-en
General
-
Target
b4068999c5c194106307e05446bbd8392a6e6ca6ff82c91c9cf70340b9dab645
-
Size
82KB
-
MD5
066dac1937654ea52318b7543b37dd04
-
SHA1
a5510b66675ef961330050ce814a671fa245c80c
-
SHA256
b4068999c5c194106307e05446bbd8392a6e6ca6ff82c91c9cf70340b9dab645
-
SHA512
468190d011550706369264293d6192b25520c2ef03e98209fa4a9ad8cf5156a6b925d78385d42391441578921e2bcd0634344f65ee9f17b0110265dc49a1a0f4
-
SSDEEP
768:swpSRRKsRS0ckvPAg6Xwvovd90c1FXz8gZk+Mwy9DkWgc1Xxu:LSK9WPStvd90c1F4gsLtkek
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b4068999c5c194106307e05446bbd8392a6e6ca6ff82c91c9cf70340b9dab645
Files
-
b4068999c5c194106307e05446bbd8392a6e6ca6ff82c91c9cf70340b9dab645.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
�B�%XZ7 Size: - Virtual size: 408KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�G�u�c� Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 101KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE