Behavioral task
behavioral1
Sample
8cc18e21d3c6003de0ffb02be8c49e7ff2e305949cc077417b792fb33d56fa29.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
8cc18e21d3c6003de0ffb02be8c49e7ff2e305949cc077417b792fb33d56fa29.exe
Resource
win10v2004-20240508-en
General
-
Target
8cc18e21d3c6003de0ffb02be8c49e7ff2e305949cc077417b792fb33d56fa29
-
Size
63KB
-
MD5
361b3921e3b9f9f0eb594f424db6558d
-
SHA1
31b768e79e0c3ea2fca589eeb72bf5cf296a56e1
-
SHA256
8cc18e21d3c6003de0ffb02be8c49e7ff2e305949cc077417b792fb33d56fa29
-
SHA512
cdd2402ad8292aba7e513a6d015ea7b0943de63e4c2b5f3630cb9c047444daf2ef8d6faca8b85c27b1ac96ac9b775fcac178ba9fbfb9f02094661da739c08268
-
SSDEEP
768:jSxam3Usjr3REXXr8yxFChMp7v9DLKrzCnbcuyD7UVeQI5noMmcAvcV4RP0U+t6:jRsjdEIUFC2p79OCnouy8VD4AG4RsfU
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8cc18e21d3c6003de0ffb02be8c49e7ff2e305949cc077417b792fb33d56fa29
Files
-
8cc18e21d3c6003de0ffb02be8c49e7ff2e305949cc077417b792fb33d56fa29.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 140KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE