Static task
static1
Behavioral task
behavioral1
Sample
d867ffc957282c93b49dbd213e57846baaa9939317bec38997492edaf8849e4e.exe
Resource
win7-20240419-en
General
-
Target
d867ffc957282c93b49dbd213e57846baaa9939317bec38997492edaf8849e4e
-
Size
24KB
-
MD5
1f22b1e322a5da50f83dcd00617a064f
-
SHA1
1aa6675e1b1c2ab971a67c6301996011fdaee303
-
SHA256
d867ffc957282c93b49dbd213e57846baaa9939317bec38997492edaf8849e4e
-
SHA512
bef2e64c2d45d314112030d75dc2a96f6f1d337f9f7e38c2e2db5390bdd2ad0dd7a3014a321ed38a27908c8e7e2ad083753575253d2b76870330c7807620d0fe
-
SSDEEP
768:6FE9INGTINyzF5Z4r0EgS1BAwLtMZr70crYVE4buY0:6FEeGsNK5yzgS1iwRIP0cUVEK0
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d867ffc957282c93b49dbd213e57846baaa9939317bec38997492edaf8849e4e
Files
-
d867ffc957282c93b49dbd213e57846baaa9939317bec38997492edaf8849e4e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
w�z�8�Y Size: - Virtual size: 340KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.�6#�ӊ Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE