Behavioral task
behavioral1
Sample
b3a568a86143c5a846f938983d2b8a5da6fe1b2544b59d4a985fb422eabf6168.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b3a568a86143c5a846f938983d2b8a5da6fe1b2544b59d4a985fb422eabf6168.exe
Resource
win10v2004-20240508-en
General
-
Target
b3a568a86143c5a846f938983d2b8a5da6fe1b2544b59d4a985fb422eabf6168
-
Size
208KB
-
MD5
4bdea4a7b4c58006204e9adec6491fa2
-
SHA1
6f4ceebe7165acad88883d609de1cc4e9deed18a
-
SHA256
b3a568a86143c5a846f938983d2b8a5da6fe1b2544b59d4a985fb422eabf6168
-
SHA512
5aff52d741057d5915065e729df416db18b935dece80fd5093b77999fab1e3660c9d6a254bc546b505942b10b9b9988ced86ffc2c2e8341555ebec50eef12e9a
-
SSDEEP
6144:JmCAIuZAIuDMVtM/1H0WH0g9iMGsSaOyi3k:7AIuZAIuOQH0WH0g9iMGsSaOyi3k
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b3a568a86143c5a846f938983d2b8a5da6fe1b2544b59d4a985fb422eabf6168
Files
-
b3a568a86143c5a846f938983d2b8a5da6fe1b2544b59d4a985fb422eabf6168.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE