Behavioral task
behavioral1
Sample
32726ed8915b124b4bd80ae8d885de0a713cdccb2b9d7b09d67fdafc1b30adc4.exe
Resource
win7-20240220-en
General
-
Target
32726ed8915b124b4bd80ae8d885de0a713cdccb2b9d7b09d67fdafc1b30adc4
-
Size
377KB
-
MD5
5b00b4e93e0cde21c7331ec7046c24f2
-
SHA1
db47d67306a7d61916e081e8646b38a2e25ebd9e
-
SHA256
32726ed8915b124b4bd80ae8d885de0a713cdccb2b9d7b09d67fdafc1b30adc4
-
SHA512
1cd9cee96443b3b0b7cf949ee7f89878928a409a962269c0998897b511017274e4f0a4df3c0098683f4627aed68c2cceca1e950f724eb9e5185529171e776465
-
SSDEEP
6144:9cm4FmowdHoS4WEkMawdHoSbdwqGw+tw+ttidCy11:/4wFHoS4WEkMTHoSbG++tw+tYYyX
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 32726ed8915b124b4bd80ae8d885de0a713cdccb2b9d7b09d67fdafc1b30adc4
Files
-
32726ed8915b124b4bd80ae8d885de0a713cdccb2b9d7b09d67fdafc1b30adc4.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE