Behavioral task
behavioral1
Sample
c53813d3a8a3a949d920bbeaeded24b88e1901b6573222cfad6b530cd7aa3a89.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c53813d3a8a3a949d920bbeaeded24b88e1901b6573222cfad6b530cd7aa3a89.exe
Resource
win10v2004-20240508-en
General
-
Target
c53813d3a8a3a949d920bbeaeded24b88e1901b6573222cfad6b530cd7aa3a89
-
Size
136KB
-
MD5
a23dd5986ba160b1183f1edbe8c2d387
-
SHA1
1cb7bee011752d16722732d4dc8101c809f95124
-
SHA256
c53813d3a8a3a949d920bbeaeded24b88e1901b6573222cfad6b530cd7aa3a89
-
SHA512
9223c7ef0dbc8dc5c7f0d732c347a1a6a232110a20f37ec961d408194b2eb23737b6bc4c931ce4b7765afab1377a4fff6f67d78d4705123bc1a152f9f575271a
-
SSDEEP
3072:+nymCAIuZAIuYSMjoqtMHfhf5Ssk/6yUVJ:JmCAIuZAIuDMVtM/XS7UVJ
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c53813d3a8a3a949d920bbeaeded24b88e1901b6573222cfad6b530cd7aa3a89
Files
-
c53813d3a8a3a949d920bbeaeded24b88e1901b6573222cfad6b530cd7aa3a89.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE