Behavioral task
behavioral1
Sample
5761e39e1174d20f53839a81e20022ac8b9f87092d0abad81faf51796d4448d1.exe
Resource
win7-20240221-en
General
-
Target
5761e39e1174d20f53839a81e20022ac8b9f87092d0abad81faf51796d4448d1
-
Size
85KB
-
MD5
c1d65f473e2cd1f3b475e65d6da226bc
-
SHA1
ca76d11c020341b4884e7143e8720b9fcd96e518
-
SHA256
5761e39e1174d20f53839a81e20022ac8b9f87092d0abad81faf51796d4448d1
-
SHA512
df59681ff0e115d198bdb74806cbaac31ef11f539c9f0ecd6cee3c0d45b4bbff44bc6ce08e748bdda068e30d5a08c3d86c57162a99cb3216daeb4184e19cdfc4
-
SSDEEP
768:8qnum1opQNwC3BESe4Vqth+0V5vKPyLylze70wi3BEmB:8vm1AeT7BVwxfvLFwjRB
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5761e39e1174d20f53839a81e20022ac8b9f87092d0abad81faf51796d4448d1
Files
-
5761e39e1174d20f53839a81e20022ac8b9f87092d0abad81faf51796d4448d1.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 41KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ap0x Size: 1024B - Virtual size: 788B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE