Behavioral task
behavioral1
Sample
c87ca894108c8af72c3d7ee153acd6cee1f6512b1c66a357dfd09a067f392fcb.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
c87ca894108c8af72c3d7ee153acd6cee1f6512b1c66a357dfd09a067f392fcb.exe
Resource
win10v2004-20240508-en
General
-
Target
c87ca894108c8af72c3d7ee153acd6cee1f6512b1c66a357dfd09a067f392fcb
-
Size
63KB
-
MD5
b895ba10673facb913c42df31baeee2e
-
SHA1
edd3954c5e0d35c370eda35307cf50d5f12b1f2a
-
SHA256
c87ca894108c8af72c3d7ee153acd6cee1f6512b1c66a357dfd09a067f392fcb
-
SHA512
005d4a5796ccfba0e7b863d5db74eecb45f24eed0c9b35ae8b288bc9eea3089cd25f61c1ae18a5f13db2a94d4adebe7d68dc46865288b12db9661e930e8184e5
-
SSDEEP
768:jSxam3Usjr3REXXr8yxFChMp7v9DLKrzCnbcuyD7UVeQI5noXVcAvcV4RP0U+t6:jRsjdEIUFC2p79OCnouy8VDaAG4RsfU
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c87ca894108c8af72c3d7ee153acd6cee1f6512b1c66a357dfd09a067f392fcb
Files
-
c87ca894108c8af72c3d7ee153acd6cee1f6512b1c66a357dfd09a067f392fcb.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 140KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE