Behavioral task
behavioral1
Sample
0ffb9258d23f9acfe79671c98499523ef28cd4d803caba220f6e99da4cb165b1.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0ffb9258d23f9acfe79671c98499523ef28cd4d803caba220f6e99da4cb165b1.exe
Resource
win10v2004-20240426-en
General
-
Target
0ffb9258d23f9acfe79671c98499523ef28cd4d803caba220f6e99da4cb165b1
-
Size
227KB
-
MD5
48533a54f5cfdd4250e98a3f1f3ff208
-
SHA1
1f7742d42eca107f027cc268eca5b15c5cb388ad
-
SHA256
0ffb9258d23f9acfe79671c98499523ef28cd4d803caba220f6e99da4cb165b1
-
SHA512
1254fc000755d17d7f2fe6305a770b94acb8ef9d961a62f4aa17c03629fe24e9073e7a5e1250d89a8ca06c90a0c8f7221063e2a4dea8982bd0c8d0676064a71d
-
SSDEEP
3072:+nymCAIuZAIuYSMjoqtMHfhfmfAIuZAIuYSMjoqtMHfhflgT:JmCAIuZAIuDMVtM/EfAIuZAIuDMVtM/U
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ffb9258d23f9acfe79671c98499523ef28cd4d803caba220f6e99da4cb165b1
Files
-
0ffb9258d23f9acfe79671c98499523ef28cd4d803caba220f6e99da4cb165b1.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE