Static task
static1
Behavioral task
behavioral1
Sample
431a5e5c28f275e6618b62397c661c01d8b3101718467609c8a07cdd75d5e062.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
431a5e5c28f275e6618b62397c661c01d8b3101718467609c8a07cdd75d5e062.exe
Resource
win10v2004-20240426-en
General
-
Target
431a5e5c28f275e6618b62397c661c01d8b3101718467609c8a07cdd75d5e062
-
Size
597KB
-
MD5
428a78ca0129156240a51607d4dfa9e1
-
SHA1
b5f82878b7bb8db2454963039ead0c0bca4f19d9
-
SHA256
431a5e5c28f275e6618b62397c661c01d8b3101718467609c8a07cdd75d5e062
-
SHA512
1dba94ef4a258cb24dc84260619fb08711629bf7e714e2d50b3f6045f06837f57ab534cc0b8258b1635144f986d3aa555806e4905477d47618e828495df9ecb9
-
SSDEEP
12288:wlbR+rpNWz8beHITmTmbA4yrRGsR5A5lcwFhpto/cT9aRzSW:WbR+rpC/mbANrr5MiwFhDoET9tW
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 431a5e5c28f275e6618b62397c661c01d8b3101718467609c8a07cdd75d5e062
Files
-
431a5e5c28f275e6618b62397c661c01d8b3101718467609c8a07cdd75d5e062.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
VHqxTUpa Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IaDsgWGk Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE