Behavioral task
behavioral1
Sample
d0e16de074edac58406cadc1cd62a341b1b6c1e9827d555e1d0324914dc9ecb4.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d0e16de074edac58406cadc1cd62a341b1b6c1e9827d555e1d0324914dc9ecb4.exe
Resource
win10v2004-20240426-en
General
-
Target
d0e16de074edac58406cadc1cd62a341b1b6c1e9827d555e1d0324914dc9ecb4
-
Size
645KB
-
MD5
5714e52cc29e80c54d8e9764811661d1
-
SHA1
6847c8495b676a36a82deab4f8514761fd0bd575
-
SHA256
d0e16de074edac58406cadc1cd62a341b1b6c1e9827d555e1d0324914dc9ecb4
-
SHA512
afc47d3a7d6175cd3e4d78a8d864620e7505eaf7ab740e3ac2f44aa4d71e47c005179929840cb3e666264ebf1f22fe41c63b1169f0a65bc5cc6363680d76adae
-
SSDEEP
12288:7AIuZAIuO50md3/94A2p8GnqZycIr+VtKEvFWOC3aEX9YQ70:I5x/WnSyhbEv8O0GQA
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d0e16de074edac58406cadc1cd62a341b1b6c1e9827d555e1d0324914dc9ecb4
Files
-
d0e16de074edac58406cadc1cd62a341b1b6c1e9827d555e1d0324914dc9ecb4.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE