Static task
static1
Behavioral task
behavioral1
Sample
cad492e3f18edef27989de4c056d66394971d5dd7f873aecbf1c27430d1f4b34.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cad492e3f18edef27989de4c056d66394971d5dd7f873aecbf1c27430d1f4b34.exe
Resource
win10v2004-20240508-en
General
-
Target
cad492e3f18edef27989de4c056d66394971d5dd7f873aecbf1c27430d1f4b34
-
Size
1.8MB
-
MD5
0d42984a7c254df155c6cb70dff193b2
-
SHA1
52118322bb9b109f8c2f582344842c04f7f948ce
-
SHA256
cad492e3f18edef27989de4c056d66394971d5dd7f873aecbf1c27430d1f4b34
-
SHA512
845a7130f087b30162296a64316b176d95dff1ab899825a152a8c7d25e93e4bc57d8e20267c16a9f4db37ef66b7e95c4f7492bbcacd16b9c9c40f7d6cd5e831b
-
SSDEEP
49152:gp//YRTeWBGTNJtU9lL7nNXWy9GIdwv8y3iLYrr/:+//YxRMp8l/dWEGIk34YrL
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
Processes:
resource yara_rule sample UPX -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource cad492e3f18edef27989de4c056d66394971d5dd7f873aecbf1c27430d1f4b34
Files
-
cad492e3f18edef27989de4c056d66394971d5dd7f873aecbf1c27430d1f4b34.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
HWAxCMck Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DrtWJgcR Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�� Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE