Behavioral task
behavioral1
Sample
531af45caf33449e06901974c1a07d99bc3abe1bcb79ca66428a93447c3bc859.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
531af45caf33449e06901974c1a07d99bc3abe1bcb79ca66428a93447c3bc859.exe
Resource
win10v2004-20240426-en
General
-
Target
531af45caf33449e06901974c1a07d99bc3abe1bcb79ca66428a93447c3bc859
-
Size
514KB
-
MD5
08490181a030fe218fdc4529891ec9cd
-
SHA1
805faeb8ae80a45e54bf09fd393791a459f25d1d
-
SHA256
531af45caf33449e06901974c1a07d99bc3abe1bcb79ca66428a93447c3bc859
-
SHA512
df9497278080660077753d5a687d965d595913b48cc609e2a596832fb9bebd58091709ecebf0be27ba20bb8fbca6ff915d34269172407ece98c92508ee4732d5
-
SSDEEP
6144:S5Y4dmCm+pYfaS0rlHoMZAOTZ53tQpnLiEsV/fIhf60HVB5ZXLnTZlid5oiak4V0:OY4dm3+pQaS8HfZF3tcnL3YfcVHZXR+
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 531af45caf33449e06901974c1a07d99bc3abe1bcb79ca66428a93447c3bc859
Files
-
531af45caf33449e06901974c1a07d99bc3abe1bcb79ca66428a93447c3bc859.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 500KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 497KB - Virtual size: 500KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE