Behavioral task
behavioral1
Sample
97a29bc9dd7fb6c52dffa26574aa9151dd05fa5c980bfd92aa6c19cc08392435.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
97a29bc9dd7fb6c52dffa26574aa9151dd05fa5c980bfd92aa6c19cc08392435.exe
Resource
win10v2004-20240419-en
General
-
Target
97a29bc9dd7fb6c52dffa26574aa9151dd05fa5c980bfd92aa6c19cc08392435
-
Size
1.7MB
-
MD5
597c9ed358b1eb7fbdf8ce4d3fcfaea1
-
SHA1
b8fe2a7547b834e5a1ce7e36c018646470ea792e
-
SHA256
97a29bc9dd7fb6c52dffa26574aa9151dd05fa5c980bfd92aa6c19cc08392435
-
SHA512
cfe83db19c866e022f4c34dcad3abde4802bc8a5f14e89828f1a559bdc0db4406e555d045c42763358eee7840358919711c11449025818b11ee3eef764121847
-
SSDEEP
49152:FsbakGKGPoZu5er+7r0zzswMuFd4PLyTwJ+wFF:FsbakGKGPnQr+8zzsN4CDyUJ+WF
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 97a29bc9dd7fb6c52dffa26574aa9151dd05fa5c980bfd92aa6c19cc08392435
Files
-
97a29bc9dd7fb6c52dffa26574aa9151dd05fa5c980bfd92aa6c19cc08392435.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qhx Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sy Size: 512B - Virtual size: 4KB