Static task
static1
Behavioral task
behavioral1
Sample
a4c5ff91f33178b40aab70e652d738400c7fcae35b2c5a5878baf93a59f83606.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a4c5ff91f33178b40aab70e652d738400c7fcae35b2c5a5878baf93a59f83606.exe
Resource
win10v2004-20240508-en
General
-
Target
a4c5ff91f33178b40aab70e652d738400c7fcae35b2c5a5878baf93a59f83606
-
Size
70KB
-
MD5
011fd71b19a547e270f5c4bd1050a1d4
-
SHA1
0d04a5516f90cfac70d9a848a2048cc1d91493d5
-
SHA256
a4c5ff91f33178b40aab70e652d738400c7fcae35b2c5a5878baf93a59f83606
-
SHA512
b1ec7ebac244bec7165aad7e75ff6739de8bc7b5154c82c60e635c8ab27c1c6b9def33dd43b4a77b5fc51e09161c22fccf5b1ff14eb7fc666bc1782d86172723
-
SSDEEP
1536:0q5VwWDjDkdTRqHFOn8tIbbeYiuZIFS9b1YTjipvF2a:0q5ud9qHFO8Kf3rIIb1YvQd2a
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a4c5ff91f33178b40aab70e652d738400c7fcae35b2c5a5878baf93a59f83606
Files
-
a4c5ff91f33178b40aab70e652d738400c7fcae35b2c5a5878baf93a59f83606.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
2e91sdby Size: - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
304kujeu Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
3098vbbf Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE