Static task
static1
Behavioral task
behavioral1
Sample
a5d9c09c3b6191c51b6fd014831941de1ba6e8f96e7e66f048706e97884169f4.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
a5d9c09c3b6191c51b6fd014831941de1ba6e8f96e7e66f048706e97884169f4.exe
Resource
win10v2004-20240426-en
General
-
Target
a5d9c09c3b6191c51b6fd014831941de1ba6e8f96e7e66f048706e97884169f4
-
Size
83KB
-
MD5
2b304858606f6e7b70736701dea5dba1
-
SHA1
9e10884180ef3368a5d36cb4415b5061b9a9ff0e
-
SHA256
a5d9c09c3b6191c51b6fd014831941de1ba6e8f96e7e66f048706e97884169f4
-
SHA512
d1e60bce0fe8e4e8b39b0d0bb9fd516659da35a4b627b861920496a9ab67caa9a6efb040faeac607ffac0f09642179c45b35457de191a0811f4c37964b369be2
-
SSDEEP
1536:Hlqls0GgUyj5JxdA4Oj3W2Fsdq4FMG+se5G0Aox9cJNWIfoEu:HQC/yj5JO3MnMG+N5Lxxu6IfoX
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a5d9c09c3b6191c51b6fd014831941de1ba6e8f96e7e66f048706e97884169f4
Files
-
a5d9c09c3b6191c51b6fd014831941de1ba6e8f96e7e66f048706e97884169f4.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
VHqxTUpa Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IaDsgWGk Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE