Behavioral task
behavioral1
Sample
005931cf00c189cb41fec3cf17aa0c9e3d7b256af8fe0d562b79c09ce023c429.exe
Resource
win7-20240221-en
General
-
Target
005931cf00c189cb41fec3cf17aa0c9e3d7b256af8fe0d562b79c09ce023c429
-
Size
161KB
-
MD5
0925a3ded70bc62d8c2122e48b3b4a07
-
SHA1
1312310f1d6ae83615fb6abdf5491615c4eab5c5
-
SHA256
005931cf00c189cb41fec3cf17aa0c9e3d7b256af8fe0d562b79c09ce023c429
-
SHA512
a3a31a4611725cd1e8bd18ae7e2d1f17682869dac887a6639ce3fbe7b9f58eab392a7418da9e9f36425f2f3988610f94e32f3205aa6f2cd2b505d662d7d43466
-
SSDEEP
3072:xhOmTsF93UYfwC6GIout0fmCiiiXAQ5lpBoGYwNNhu0CzhKPDNuBSb:xcm4FmowdHoSgWrXF5lpKGYV0wh6D9b
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 005931cf00c189cb41fec3cf17aa0c9e3d7b256af8fe0d562b79c09ce023c429
Files
-
005931cf00c189cb41fec3cf17aa0c9e3d7b256af8fe0d562b79c09ce023c429.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE