Static task
static1
Behavioral task
behavioral1
Sample
850e6395c414265c3f5b272f68bbbb99d3a7c615adc579a72e6d0acc619a17c2.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
850e6395c414265c3f5b272f68bbbb99d3a7c615adc579a72e6d0acc619a17c2.exe
Resource
win10v2004-20240226-en
General
-
Target
850e6395c414265c3f5b272f68bbbb99d3a7c615adc579a72e6d0acc619a17c2
-
Size
1.9MB
-
MD5
0ad03d06a006eeaff8d75a5fec4ebe14
-
SHA1
6c90bcbc95476aaed3adf6f2ff88a058ac6bb15a
-
SHA256
850e6395c414265c3f5b272f68bbbb99d3a7c615adc579a72e6d0acc619a17c2
-
SHA512
81d5061e19bf604b64d2714c1809af00a4150654a3451ec314205ea1cabd0891d93460a2a76b419d5410b92b127ffdac0c08ce91de568022c327ff127ce4304b
-
SSDEEP
49152:UIj/sxSWaYiyxiPMdoYw8WNwD0qRY84fg33HSK:UIbY10PMdoYw8kG0qRYtfg33SK
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 850e6395c414265c3f5b272f68bbbb99d3a7c615adc579a72e6d0acc619a17c2
Files
-
850e6395c414265c3f5b272f68bbbb99d3a7c615adc579a72e6d0acc619a17c2.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
HWAxCMck Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DrtWJgcR Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�� Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE