Static task
static1
Behavioral task
behavioral1
Sample
f6bbaba510563c3d95332417a06c8d9f6b6c70fed337a07f83fc1f3421187b0d.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
f6bbaba510563c3d95332417a06c8d9f6b6c70fed337a07f83fc1f3421187b0d.exe
Resource
win10v2004-20240508-en
General
-
Target
f6bbaba510563c3d95332417a06c8d9f6b6c70fed337a07f83fc1f3421187b0d
-
Size
34KB
-
MD5
fc8bb48f383a5cb6fa34bfea01f41498
-
SHA1
839ccf5095ffa554de7c0b1747bb5eddb0a19690
-
SHA256
f6bbaba510563c3d95332417a06c8d9f6b6c70fed337a07f83fc1f3421187b0d
-
SHA512
1262a86fde8063e115ce333d81bd935d5eacebbb9145fa76f42566482f9216992360a6b59876ca3cb47d456fb506969377631a61b31077ea97b862a46fa69cb1
-
SSDEEP
192:gaiHDroFhxbIrTpYtfgrBPV4jbPNEv5V9+:riniFWTp2fgrzt5m
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f6bbaba510563c3d95332417a06c8d9f6b6c70fed337a07f83fc1f3421187b0d
Files
-
f6bbaba510563c3d95332417a06c8d9f6b6c70fed337a07f83fc1f3421187b0d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
OsHNLtvw Size: - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
QRhVRIHw Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
F�? Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE