Static task
static1
Behavioral task
behavioral1
Sample
3720a9f2eac5c1e36c92c952f400ae83e31cc485499352bd2fecd67e550c5c4d.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
3720a9f2eac5c1e36c92c952f400ae83e31cc485499352bd2fecd67e550c5c4d.exe
Resource
win10v2004-20240426-en
General
-
Target
3720a9f2eac5c1e36c92c952f400ae83e31cc485499352bd2fecd67e550c5c4d
-
Size
1.8MB
-
MD5
b08e507b547c9eabddcc519c23858165
-
SHA1
1c0070c470bf5d2d44c2bfd5b7857085b6b9a08a
-
SHA256
3720a9f2eac5c1e36c92c952f400ae83e31cc485499352bd2fecd67e550c5c4d
-
SHA512
63e7540426a0b1498d61f87804a0cea9989577c2f713df28998f17c7515534e3531e2a9e31a6e3ce3006ebad60a3c272cb10f8083c32eaba45208b288b19576b
-
SSDEEP
49152:M/ZejgfCSZtkFLLICjixSP2xdBsiiJNlT6czecTMgBJ5D32:gGqCS7c4EP2xdqiYNlvCYMgBJd32
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3720a9f2eac5c1e36c92c952f400ae83e31cc485499352bd2fecd67e550c5c4d
Files
-
3720a9f2eac5c1e36c92c952f400ae83e31cc485499352bd2fecd67e550c5c4d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
HWAxCMck Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DrtWJgcR Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�� Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE