Behavioral task
behavioral1
Sample
477c4bd168a6a196fc34cabf3aec0af449b52672c0a04e0d6ef0287580bdb20d.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
477c4bd168a6a196fc34cabf3aec0af449b52672c0a04e0d6ef0287580bdb20d.exe
Resource
win10v2004-20240226-en
General
-
Target
477c4bd168a6a196fc34cabf3aec0af449b52672c0a04e0d6ef0287580bdb20d
-
Size
1.2MB
-
MD5
76e75400d6dcf4b9ca4fce1072b7b393
-
SHA1
f9a11c5a8ebd72b4e3bd8f046d5380dfb164f333
-
SHA256
477c4bd168a6a196fc34cabf3aec0af449b52672c0a04e0d6ef0287580bdb20d
-
SHA512
de209f721622c408a804fd345a92a76cd0e1c892c255728155647a305a0492bb0e604ec349fbf7c075e6e357a9d020318287ec3ea2d604d0debd6f39f3f7b2d8
-
SSDEEP
24576:xnP7F6W7hnQZB2gUuCcHflWkW3Ckdh/AwY98VLNpM+6tcIVcHgnIF9:FPIW7pCKSHflW/5h/AwthXPIU4a9
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 477c4bd168a6a196fc34cabf3aec0af449b52672c0a04e0d6ef0287580bdb20d
Files
-
477c4bd168a6a196fc34cabf3aec0af449b52672c0a04e0d6ef0287580bdb20d.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qhx Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sy Size: 512B - Virtual size: 4KB