Behavioral task
behavioral1
Sample
943290937ba36ea9368b1c02d23b0905716f88c47f0e59bc8c83e7f0bb0ff904.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
943290937ba36ea9368b1c02d23b0905716f88c47f0e59bc8c83e7f0bb0ff904.exe
Resource
win10v2004-20240508-en
General
-
Target
943290937ba36ea9368b1c02d23b0905716f88c47f0e59bc8c83e7f0bb0ff904
-
Size
134KB
-
MD5
10050a8aa2f4dd611bba6a5a75ba2b7d
-
SHA1
db8e9e9a18448014010b2b1f05dea08886327341
-
SHA256
943290937ba36ea9368b1c02d23b0905716f88c47f0e59bc8c83e7f0bb0ff904
-
SHA512
bd8a0309c63dada0ec1fb6113dc1ab0daba0f3998b49a9b3b1557f42273be1fba7801bfbb4366a997f1f635b3ba6afa3647ad6bfdd404382e18f34bee767a1ac
-
SSDEEP
1536:rF0AJELopHG9aa+9qX3apJzAKWYr0v7ioy6paK2AZqMIK7aGZh38QW:riAyLN9aa+9U2rW1ip6pr2At7NZuQW
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 943290937ba36ea9368b1c02d23b0905716f88c47f0e59bc8c83e7f0bb0ff904
Files
-
943290937ba36ea9368b1c02d23b0905716f88c47f0e59bc8c83e7f0bb0ff904.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 64KB - Virtual size: 80KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 38KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE