Static task
static1
Behavioral task
behavioral1
Sample
dbeb65d253ad1a9716adcd38fba404b11cff3a385622c72a65743d10d2c73a62.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
dbeb65d253ad1a9716adcd38fba404b11cff3a385622c72a65743d10d2c73a62.exe
Resource
win10v2004-20240426-en
General
-
Target
dbeb65d253ad1a9716adcd38fba404b11cff3a385622c72a65743d10d2c73a62
-
Size
505KB
-
MD5
0e1b8adfc51caae0017fc6a242a87b20
-
SHA1
bf820aed3911a6f07b312c7ccee688efe0e8272f
-
SHA256
dbeb65d253ad1a9716adcd38fba404b11cff3a385622c72a65743d10d2c73a62
-
SHA512
a9580b8f212704300a42e0f01e7b936965c0148b0fa83a58b3e7b9216231e47da4fc3b0cd6d5147b8aa2e5c2cbe00847b54329fd6c0e494fabe1dc62b05e12f4
-
SSDEEP
12288:wlb++b1gL5pRTcAkS/3hzN8qE43fm78VI:Wb++G5jcAkSYqyEI
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dbeb65d253ad1a9716adcd38fba404b11cff3a385622c72a65743d10d2c73a62
Files
-
dbeb65d253ad1a9716adcd38fba404b11cff3a385622c72a65743d10d2c73a62.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
VHqxTUpa Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IaDsgWGk Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE