Static task
static1
Behavioral task
behavioral1
Sample
dee8afdf42fafa80d1090d828ba509f6235bc3204639301a3c2d010f862fd3a3.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
dee8afdf42fafa80d1090d828ba509f6235bc3204639301a3c2d010f862fd3a3.exe
Resource
win10v2004-20240426-en
General
-
Target
dee8afdf42fafa80d1090d828ba509f6235bc3204639301a3c2d010f862fd3a3
-
Size
621KB
-
MD5
da6f1383081e61d648997d12334c2e03
-
SHA1
27f8b9b3847caa7a4531c1da5376d2d676efa697
-
SHA256
dee8afdf42fafa80d1090d828ba509f6235bc3204639301a3c2d010f862fd3a3
-
SHA512
4a43cda782ca931489042f74b4aa3fd5236485a3cc039ac51108ff6f196158dad47370a77a9b31a9a66d9ff4d77d54950b3d2be5af642478c3f71ac58131ad4c
-
SSDEEP
12288:wlbi+TSiZbbSoCU5qJSr1eWPUntBB0sP0MugCAjHUzTshw:Wbi+TSi1SoCU5qJSr1eWPSCsP0MugC6+
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dee8afdf42fafa80d1090d828ba509f6235bc3204639301a3c2d010f862fd3a3
Files
-
dee8afdf42fafa80d1090d828ba509f6235bc3204639301a3c2d010f862fd3a3.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
VHqxTUpa Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IaDsgWGk Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE