Behavioral task
behavioral1
Sample
37ca0fab139eb174461337dbaf3f2e0d7017f1d0e9a4a9328b6070f8371d6118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
37ca0fab139eb174461337dbaf3f2e0d7017f1d0e9a4a9328b6070f8371d6118.exe
Resource
win10v2004-20240508-en
General
-
Target
37ca0fab139eb174461337dbaf3f2e0d7017f1d0e9a4a9328b6070f8371d6118
-
Size
35KB
-
MD5
74a3aba84d9da18c98224084388f8c0e
-
SHA1
d75f1fe95780fa09011a689e18fd4e0cbc88a3ab
-
SHA256
37ca0fab139eb174461337dbaf3f2e0d7017f1d0e9a4a9328b6070f8371d6118
-
SHA512
fa40e91cda672d8bbd198a0729ff48a5e0f48b7067f89673ce343f32f10a668095c340bb7d07ecf36cf7914066862e2b19ab1635772915752b3fa87ddb4d7205
-
SSDEEP
96:OfCdAXWIV/MjljqMnVeq4D54OjNanI1MczsEMnsNM68daqmRji3mr84JynR:MG2/KljqMnV4DSOCcg2qdaqSfA4JyR
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 37ca0fab139eb174461337dbaf3f2e0d7017f1d0e9a4a9328b6070f8371d6118
Files
-
37ca0fab139eb174461337dbaf3f2e0d7017f1d0e9a4a9328b6070f8371d6118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 136KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE