Behavioral task
behavioral1
Sample
a90e1af4a70812c3a094ec6827a952dc3743f12af9cf1f1b7ffc6db1e39c5c72.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a90e1af4a70812c3a094ec6827a952dc3743f12af9cf1f1b7ffc6db1e39c5c72.exe
Resource
win10v2004-20240426-en
General
-
Target
a90e1af4a70812c3a094ec6827a952dc3743f12af9cf1f1b7ffc6db1e39c5c72
-
Size
236KB
-
MD5
ec93f9dbeb942dc715610824670d80b7
-
SHA1
ecfe9c2fa6edab2dc1292b4148ad27bd82f34ca2
-
SHA256
a90e1af4a70812c3a094ec6827a952dc3743f12af9cf1f1b7ffc6db1e39c5c72
-
SHA512
47411d98f92532710a5cbd1741d834db464bd282a25b45295bedad71ae4ca99a1929ea8f48a20141fab6d88b00a641801f431f00e3ab2fb11408f7aa028c61e4
-
SSDEEP
6144:ZjluQoS/Io5R1hl/6gio2F/V5dppUz9+JrN/zrsUf+g2t:ZEQoS5p6gipZV5d/rsWb2t
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a90e1af4a70812c3a094ec6827a952dc3743f12af9cf1f1b7ffc6db1e39c5c72
Files
-
a90e1af4a70812c3a094ec6827a952dc3743f12af9cf1f1b7ffc6db1e39c5c72.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.jxmnr Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.exjvk Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lpkez Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ