Static task
static1
Behavioral task
behavioral1
Sample
f586d2af97b0b0b3d04d749d09e1ea7564426e0708c4af06a2de6a85f517fc0b.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f586d2af97b0b0b3d04d749d09e1ea7564426e0708c4af06a2de6a85f517fc0b.exe
Resource
win10v2004-20240508-en
General
-
Target
f586d2af97b0b0b3d04d749d09e1ea7564426e0708c4af06a2de6a85f517fc0b
-
Size
240KB
-
MD5
103c08811d292da2ed17fb1f80a78f8e
-
SHA1
f4b0b262fb47443660d9be1a0e46efdec16c163d
-
SHA256
f586d2af97b0b0b3d04d749d09e1ea7564426e0708c4af06a2de6a85f517fc0b
-
SHA512
24cc1cd301ef9ee616d94d9f3d7b811115e3191b2ec039a150d47a1e23e6f7f381aa5ce3eead30ea4162382b0a8406372fb8b832d872b24f2119a2f2441dffdd
-
SSDEEP
1536:6q5VwWDjDkdTRqHFOn8tIbbeYiuZIFS9bB:6q5ud9qHFO8Kf3rIIbB
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f586d2af97b0b0b3d04d749d09e1ea7564426e0708c4af06a2de6a85f517fc0b
Files
-
f586d2af97b0b0b3d04d749d09e1ea7564426e0708c4af06a2de6a85f517fc0b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
6z44iwvz Size: - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
68c8yfls Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
6eahmwqd Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ