Behavioral task
behavioral1
Sample
4126b475ea6b711ed3873892fc6d32d411b2d7f4b45521004b4b045b970936be.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
4126b475ea6b711ed3873892fc6d32d411b2d7f4b45521004b4b045b970936be.exe
Resource
win10v2004-20240226-en
General
-
Target
4126b475ea6b711ed3873892fc6d32d411b2d7f4b45521004b4b045b970936be
-
Size
326KB
-
MD5
0518f7115a21bef0ee06656da4bde9ba
-
SHA1
c695479cc0ea8209dd40e88b28708708141166b8
-
SHA256
4126b475ea6b711ed3873892fc6d32d411b2d7f4b45521004b4b045b970936be
-
SHA512
0a236f02105abfb7c469d603da08a66a8b05a3e9e7f27d0a2c441d212a3b9c6872dbae8d36ff13ddb496751b47f4ed9995847fd3a393566c7cdd2506676c01cd
-
SSDEEP
6144:wHpQSohsUsSu7d3km3WAHN1YgB8IJ8z0U:sQthsUsTd3km3WAHN1YgByz0U
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4126b475ea6b711ed3873892fc6d32d411b2d7f4b45521004b4b045b970936be
Files
-
4126b475ea6b711ed3873892fc6d32d411b2d7f4b45521004b4b045b970936be.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE