Behavioral task
behavioral1
Sample
276fce7ae58f67c240258bcea8bef09b99e5412640a9034fabe85b52acca70e2.exe
Resource
win7-20240508-en
General
-
Target
276fce7ae58f67c240258bcea8bef09b99e5412640a9034fabe85b52acca70e2
-
Size
328KB
-
MD5
a18e8658b45053d0502995598a87b573
-
SHA1
a016dfaa7fae39fef57b7817385d0570b80281c9
-
SHA256
276fce7ae58f67c240258bcea8bef09b99e5412640a9034fabe85b52acca70e2
-
SHA512
4321e4c1885d773a0f206b89748459271498a3a0cf004df00e22fb910a42bb78089a3efaad0d7743324c6cf9212c19750452374df84922592958bfc9345f03e4
-
SSDEEP
6144:Lcm4FmowdHoSHt251UriZFwfsDX2UznsaFVNJCMKAbe/:R4wFHoSHYHUrAwfMp3CD/
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 276fce7ae58f67c240258bcea8bef09b99e5412640a9034fabe85b52acca70e2
Files
-
276fce7ae58f67c240258bcea8bef09b99e5412640a9034fabe85b52acca70e2.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE