Behavioral task
behavioral1
Sample
b50fb55ccc1b8006a433e08fcac8b3a2145558da0f6f0099ba69e30f6c142164.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
b50fb55ccc1b8006a433e08fcac8b3a2145558da0f6f0099ba69e30f6c142164.exe
Resource
win10v2004-20240508-en
General
-
Target
b50fb55ccc1b8006a433e08fcac8b3a2145558da0f6f0099ba69e30f6c142164
-
Size
131KB
-
MD5
fa6bf8ace69955ea11ccf83ce7d44a5a
-
SHA1
d6fd899692115c84c72395b040c09d025337adee
-
SHA256
b50fb55ccc1b8006a433e08fcac8b3a2145558da0f6f0099ba69e30f6c142164
-
SHA512
582654057bc501737836f7fe552eb2eba519850f9fbc280fe2da2a3f935bbdcd56299ba361666fa39c1022542da3c06e974b5c7bb6b8dfb577818cdc808ed188
-
SSDEEP
1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q897HhuMLwkT+vdc:fnyiQSo+4kT+Fc
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b50fb55ccc1b8006a433e08fcac8b3a2145558da0f6f0099ba69e30f6c142164
Files
-
b50fb55ccc1b8006a433e08fcac8b3a2145558da0f6f0099ba69e30f6c142164.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE