Behavioral task
behavioral1
Sample
8c3833a6d8c95dd824c6e1d05d2e41cd3bb0a39413fd51127e3a2d02d3aada69.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
8c3833a6d8c95dd824c6e1d05d2e41cd3bb0a39413fd51127e3a2d02d3aada69.exe
Resource
win10v2004-20240426-en
General
-
Target
8c3833a6d8c95dd824c6e1d05d2e41cd3bb0a39413fd51127e3a2d02d3aada69
-
Size
130KB
-
MD5
98550eadcae39be9c8a130b2f9b612a8
-
SHA1
f2389c7936058d8449f6a669d539a0a19806468b
-
SHA256
8c3833a6d8c95dd824c6e1d05d2e41cd3bb0a39413fd51127e3a2d02d3aada69
-
SHA512
5c57fca6353576537c0d234a4d358fb119854a60ba0749c03c39cac6e3d91df309a9c2fd0f3fc18a239ae4303d25026d3068c6f1981799470ecbbb1855b8f03f
-
SSDEEP
1536:67Zf/FAxTWY1++PJHJXA/OsIZtTmXadjUSbcDemTPAZk+cLtdNlb9PfESDOayxaM:+nyi06W2QZwKS7M
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8c3833a6d8c95dd824c6e1d05d2e41cd3bb0a39413fd51127e3a2d02d3aada69
Files
-
8c3833a6d8c95dd824c6e1d05d2e41cd3bb0a39413fd51127e3a2d02d3aada69.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE