Behavioral task
behavioral1
Sample
cf0ab9314ad0c656ad2f23b720af2e8ea48a82d861658e0f915a3912a03c57b7.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cf0ab9314ad0c656ad2f23b720af2e8ea48a82d861658e0f915a3912a03c57b7.exe
Resource
win10v2004-20240508-en
General
-
Target
cf0ab9314ad0c656ad2f23b720af2e8ea48a82d861658e0f915a3912a03c57b7
-
Size
1.6MB
-
MD5
2f9867d47e627f59c34fd8934fd7eee7
-
SHA1
b9343007323063e8d7848d44acdfd104daa5cc89
-
SHA256
cf0ab9314ad0c656ad2f23b720af2e8ea48a82d861658e0f915a3912a03c57b7
-
SHA512
d2b8ca714c38c6631fbad6ccdba673a11e780ece19bf6b69292752beb6f0c45fa8a5e99c776fcc2713bd5721c862f43e7215ead7b1ad53570e0190dff84c4cf8
-
SSDEEP
49152:CtPbo2teYMB+lIymikH6Ihy+nrIFVyhV5rEp:CtM2tqAW7itpYrYVCTwp
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cf0ab9314ad0c656ad2f23b720af2e8ea48a82d861658e0f915a3912a03c57b7
Files
-
cf0ab9314ad0c656ad2f23b720af2e8ea48a82d861658e0f915a3912a03c57b7.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.jxmnr Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lpkez Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.g Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.i Size: 512B - Virtual size: 4KB