Static task
static1
Behavioral task
behavioral1
Sample
804a1e9c7fc7264c847c6064b940cd63d31728cdf5473712f98e3b9bfc6dbb49.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
804a1e9c7fc7264c847c6064b940cd63d31728cdf5473712f98e3b9bfc6dbb49.exe
Resource
win10v2004-20240508-en
General
-
Target
804a1e9c7fc7264c847c6064b940cd63d31728cdf5473712f98e3b9bfc6dbb49
-
Size
505KB
-
MD5
bc9528dc93a42cc9a2046291dff58561
-
SHA1
a2e0859f26eb378a5c68f5bb1ffea19f5b686e91
-
SHA256
804a1e9c7fc7264c847c6064b940cd63d31728cdf5473712f98e3b9bfc6dbb49
-
SHA512
379e5244a761a51107b1253cb9fbc5037883435c3d32610f232cf1953f5ed5b2309bb7044d6296a11cd3fcd71ad32025d7794c9a373da21ad14bdf6551e735b2
-
SSDEEP
12288:wlbi+b1gL5pRTcAkS/3hzN8qE43fm78V2:Wbi+G5jcAkSYqyE2
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 804a1e9c7fc7264c847c6064b940cd63d31728cdf5473712f98e3b9bfc6dbb49
Files
-
804a1e9c7fc7264c847c6064b940cd63d31728cdf5473712f98e3b9bfc6dbb49.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
VHqxTUpa Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IaDsgWGk Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE