Behavioral task
behavioral1
Sample
e2634b3782e4a3e35e25375df6ca14211cdb04d031e9edd0cdf1fc3ed56a738f.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e2634b3782e4a3e35e25375df6ca14211cdb04d031e9edd0cdf1fc3ed56a738f.exe
Resource
win10v2004-20240419-en
General
-
Target
e2634b3782e4a3e35e25375df6ca14211cdb04d031e9edd0cdf1fc3ed56a738f
-
Size
982KB
-
MD5
b37234a914d9cd03cd67bd77062fef38
-
SHA1
70f9e88d7366247fdeb20589a76e94009f5c63ce
-
SHA256
e2634b3782e4a3e35e25375df6ca14211cdb04d031e9edd0cdf1fc3ed56a738f
-
SHA512
e79b4e14baa2b8bfd8118eb88d9468748cbcc29fd653a2cd7c0a3a5ff5da3f7aed72d7e7726cadf7d3907b607e17d8ffdcfd0fa2691802bd300ba6d5312bd148
-
SSDEEP
24576:ZMpny17Run6SAhCRtTwxBmlhhbto8s+F3b/wSnr:b17RthCRtsWlD3s+xNr
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e2634b3782e4a3e35e25375df6ca14211cdb04d031e9edd0cdf1fc3ed56a738f
Files
-
e2634b3782e4a3e35e25375df6ca14211cdb04d031e9edd0cdf1fc3ed56a738f.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.jxmnr Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.exjvk Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lpkez Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ