Behavioral task
behavioral1
Sample
da4cd0e99dc913792a1a9652c7e6077186a93bd98717472c5c87cc6221f40039.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
da4cd0e99dc913792a1a9652c7e6077186a93bd98717472c5c87cc6221f40039.exe
Resource
win10v2004-20240419-en
General
-
Target
da4cd0e99dc913792a1a9652c7e6077186a93bd98717472c5c87cc6221f40039
-
Size
534KB
-
MD5
01bb2ab972b19495b6c1952bba60bc7e
-
SHA1
079d7e97ce1b8bbff566f3c548a56e8f8588164b
-
SHA256
da4cd0e99dc913792a1a9652c7e6077186a93bd98717472c5c87cc6221f40039
-
SHA512
23f9811531ac437e71e0b3725bfd83b095335a9cb50751a581c18a7cca8ef34977236df60f5c81f1bd6cd0bcd88e737182f93e837e3a88cea4dfa2359e8d43df
-
SSDEEP
12288:+yu7CRNuUwUY/JjtV2Lc31pOZ6GsdBo6LUqU/HIZ+RiwBooS1:wRUwUY/JjtV2LcbWpsPU/HoAa
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource da4cd0e99dc913792a1a9652c7e6077186a93bd98717472c5c87cc6221f40039
Files
-
da4cd0e99dc913792a1a9652c7e6077186a93bd98717472c5c87cc6221f40039.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 348KB - Virtual size: 348KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 169KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE