Behavioral task
behavioral1
Sample
39666cf3df9ea2240b69f16a2237a0202134dab6b1c578c0037eeb5db72a7aaf.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
39666cf3df9ea2240b69f16a2237a0202134dab6b1c578c0037eeb5db72a7aaf.exe
Resource
win10v2004-20240426-en
General
-
Target
39666cf3df9ea2240b69f16a2237a0202134dab6b1c578c0037eeb5db72a7aaf
-
Size
72KB
-
MD5
72f65977d778204a854cffb37376124e
-
SHA1
88072dcd7393fb02eb7cede663d7f1a911f5522a
-
SHA256
39666cf3df9ea2240b69f16a2237a0202134dab6b1c578c0037eeb5db72a7aaf
-
SHA512
740109d6bdd31d0853f5c61479b9069a12a3c6cfb47b61e03b2eff62ef4f4f5442d4fff9bdef8ac7e415b85e2f9b2e8e93c3866d8868253d06ffec09eba75691
-
SSDEEP
768:PWcNa8Zz5iQnixdPrBKgBoBRBkrZ4lrPD:rNa8Zz5iQnixdPrBKguBRBk18rP
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 39666cf3df9ea2240b69f16a2237a0202134dab6b1c578c0037eeb5db72a7aaf
Files
-
39666cf3df9ea2240b69f16a2237a0202134dab6b1c578c0037eeb5db72a7aaf.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 328KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 70KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE