Behavioral task
behavioral1
Sample
66eb0f2819744bf2133d4d509a6bde3bc661b0109f8de959a9433e86c5c224c6.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
66eb0f2819744bf2133d4d509a6bde3bc661b0109f8de959a9433e86c5c224c6.exe
Resource
win10v2004-20240508-en
General
-
Target
66eb0f2819744bf2133d4d509a6bde3bc661b0109f8de959a9433e86c5c224c6
-
Size
1.2MB
-
MD5
773434a269a41b49e8db5fd318964509
-
SHA1
508359fa6c63413afc8e9ac5512b209e2e89e665
-
SHA256
66eb0f2819744bf2133d4d509a6bde3bc661b0109f8de959a9433e86c5c224c6
-
SHA512
a7ebe27472151cfa81faaa9e8827f15e855f7c35d9b4cc8d3acf41da5a5bf96eb0374ca99e932ccdc471c3afc7982f9dcf0241002a460a21508b9ed76dec8a5d
-
SSDEEP
24576:SdN3qlN/eqU2ybTI4X+lbh1lGzrYfUwpOGzh29BXPGlRGTyGC:AJqlJRGY4uBhnGzrYfUsOG1qBelRoyt
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 66eb0f2819744bf2133d4d509a6bde3bc661b0109f8de959a9433e86c5c224c6
Files
-
66eb0f2819744bf2133d4d509a6bde3bc661b0109f8de959a9433e86c5c224c6.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.jxmnr Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lpkez Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.g Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.i Size: 512B - Virtual size: 4KB