Behavioral task
behavioral1
Sample
d9bc871fcbd365245684ba89b5f7d9cb5961f354ce122d5843b381b32b110f8a.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d9bc871fcbd365245684ba89b5f7d9cb5961f354ce122d5843b381b32b110f8a.exe
Resource
win10v2004-20240508-en
General
-
Target
d9bc871fcbd365245684ba89b5f7d9cb5961f354ce122d5843b381b32b110f8a
-
Size
1.6MB
-
MD5
67ab3fb7aec9beb443e4ba4747b78239
-
SHA1
b29ce1550fe19ae6524b019d9efb563f3304b52f
-
SHA256
d9bc871fcbd365245684ba89b5f7d9cb5961f354ce122d5843b381b32b110f8a
-
SHA512
3b5263e4826910adcf12d30a3e840713cb1baed84baf058f4064c991d7eea1fe27e59f31d3cc836e0046e8221226a1d3d3fe0b6ce3897e4e311154567cb66d6b
-
SSDEEP
24576:V5MAQCx3IwLAgLszx/R7M3mjd51VAMwFqpRV5tHG/g8tQHS314iG4O:w7G3IwrLyiCdjVAFg5tHG/mHEG3
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d9bc871fcbd365245684ba89b5f7d9cb5961f354ce122d5843b381b32b110f8a
Files
-
d9bc871fcbd365245684ba89b5f7d9cb5961f354ce122d5843b381b32b110f8a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE