Behavioral task
behavioral1
Sample
20c0af264cd5aaa5c1c4f540f6b67417aa799ecb9a78def8a5687c2e0f8d5ecc.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
20c0af264cd5aaa5c1c4f540f6b67417aa799ecb9a78def8a5687c2e0f8d5ecc.exe
Resource
win10v2004-20240508-en
General
-
Target
20c0af264cd5aaa5c1c4f540f6b67417aa799ecb9a78def8a5687c2e0f8d5ecc
-
Size
88KB
-
MD5
1478a0fd92a84bb5866dfe88a652025c
-
SHA1
2b948570391f320ee0946fc59649962333a3864e
-
SHA256
20c0af264cd5aaa5c1c4f540f6b67417aa799ecb9a78def8a5687c2e0f8d5ecc
-
SHA512
95e0fedc799ebd4169201a70996ed7375cf612018168bffbe4334af1a58a5393aef5590ac7affb029c4d79bf7ea9f95d5e835b5df5ca1d76308dc565b99bb660
-
SSDEEP
768:4qyVVy+DZ4mV+RVGO2rhgFwumSCbxTGy/BBGg4NKhLU4dhbDW2+Kv00dX0vN0TlV:2amRu3abBGy3G8nhMp5xjq
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 20c0af264cd5aaa5c1c4f540f6b67417aa799ecb9a78def8a5687c2e0f8d5ecc
Files
-
20c0af264cd5aaa5c1c4f540f6b67417aa799ecb9a78def8a5687c2e0f8d5ecc.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE