Behavioral task
behavioral1
Sample
b249e4cd4488d9d36851a0dd125bfc4bf81215a4859f5b6dd20f07034b1e5e75.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b249e4cd4488d9d36851a0dd125bfc4bf81215a4859f5b6dd20f07034b1e5e75.exe
Resource
win10v2004-20240226-en
General
-
Target
b249e4cd4488d9d36851a0dd125bfc4bf81215a4859f5b6dd20f07034b1e5e75
-
Size
3.8MB
-
MD5
84b9cb47158527d085b485b8282a730e
-
SHA1
c54c72d05f4b7c707558197b6f02368317dc76d8
-
SHA256
b249e4cd4488d9d36851a0dd125bfc4bf81215a4859f5b6dd20f07034b1e5e75
-
SHA512
e2703f0b83ef15be9e2f01f3f8407ba4f16e0d136b1d5c310e3f7d86eacc0c2439a81d5d34796d4bae8bd9fef7e2a49d96693104fb819c02e0b8b128f5f6d225
-
SSDEEP
49152:IpCJaSeHz2UXUZdvOFGF0aHo/QngV/n4nY28lop6fh:WSSeBOW0SmQnJYVq4h
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b249e4cd4488d9d36851a0dd125bfc4bf81215a4859f5b6dd20f07034b1e5e75
Files
-
b249e4cd4488d9d36851a0dd125bfc4bf81215a4859f5b6dd20f07034b1e5e75.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE