Behavioral task
behavioral1
Sample
a3ac234f06d8e1da1e505f70fb34e6c55064e35014e37b9f3e61aca9e4fe4abd.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
a3ac234f06d8e1da1e505f70fb34e6c55064e35014e37b9f3e61aca9e4fe4abd.exe
Resource
win10v2004-20240419-en
General
-
Target
a3ac234f06d8e1da1e505f70fb34e6c55064e35014e37b9f3e61aca9e4fe4abd
-
Size
1.3MB
-
MD5
b64346bdd6ebf6cbcd459fa48e11a815
-
SHA1
258d4de38f490db744c61b0371db0903d6e1982f
-
SHA256
a3ac234f06d8e1da1e505f70fb34e6c55064e35014e37b9f3e61aca9e4fe4abd
-
SHA512
d486227a7c5b4360171ae4e4d443e7da13efe183c105379ad23f03e0bf0c9d76e125effaa0d51d7b99de0b448785fbd6cf4802c327c328ce5ce64ce9fc33ae7f
-
SSDEEP
24576:NSL9EGeHGzDOXpUUS2ZrGv1Tskj1EJp2Bk8bbaL2dFfNartHfC3cqvV7Nj:N2eHXfSSU1Tj2uBk8bb7NCFKH7h
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a3ac234f06d8e1da1e505f70fb34e6c55064e35014e37b9f3e61aca9e4fe4abd
Files
-
a3ac234f06d8e1da1e505f70fb34e6c55064e35014e37b9f3e61aca9e4fe4abd.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bvxzt Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.yno Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vzkj Size: 512B - Virtual size: 4KB
.lygia Size: 512B - Virtual size: 4KB
.o Size: 512B - Virtual size: 4KB