Behavioral task
behavioral1
Sample
62a0bad5f4c5383f237bf2b302492e158aff5cab844d9135f1f09f3aba2d93b5.exe
Resource
win7-20231129-en
General
-
Target
62a0bad5f4c5383f237bf2b302492e158aff5cab844d9135f1f09f3aba2d93b5
-
Size
453KB
-
MD5
7ad22582712aba96b698be620ca590d1
-
SHA1
050166654352e689be7c39f21d478db8eacf4f98
-
SHA256
62a0bad5f4c5383f237bf2b302492e158aff5cab844d9135f1f09f3aba2d93b5
-
SHA512
65db88e98fb65ac68bc0d16825b69eb11b30cdc6b2cb1775172799f03c60e6f3520bdd1994617fadefbf4e2de822050c487fb05459abeaaa08f9e990f24392ac
-
SSDEEP
6144:rcm4FmowdHoSphraHcpOaKHpXfRo0V8JcgE+ezpg1xrloBNTNmE:x4wFHoS3eFaKHpv/VycgE81lgz
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 62a0bad5f4c5383f237bf2b302492e158aff5cab844d9135f1f09f3aba2d93b5
Files
-
62a0bad5f4c5383f237bf2b302492e158aff5cab844d9135f1f09f3aba2d93b5.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tkjdelw Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE