Behavioral task
behavioral1
Sample
0983b26318b282c1efebfa259114a8737120292011b78cf0f7c96fd3e16d5e7d.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0983b26318b282c1efebfa259114a8737120292011b78cf0f7c96fd3e16d5e7d.exe
Resource
win10v2004-20240426-en
General
-
Target
0983b26318b282c1efebfa259114a8737120292011b78cf0f7c96fd3e16d5e7d
-
Size
2.0MB
-
MD5
2908c953d6999cd514ab00cca9695f76
-
SHA1
85ffcc2c683e84f3fb6e4fc0ec0e33ec232972ec
-
SHA256
0983b26318b282c1efebfa259114a8737120292011b78cf0f7c96fd3e16d5e7d
-
SHA512
9b4fa9bc633079ca98fb120fbdb8d4d23b98a2735bc344f864deed8702de95a00288c4ab733c33b3c2a4521def4795d37e7668815d4e13bd6f7aaac4d99fdb7c
-
SSDEEP
49152:XZXJ7OA0hqHv8TGQQNi2ZSnCv5BkjhFKAbA1WV1AnSWR:XhJ7OA0IPbQOx55BkjhFDdQVR
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0983b26318b282c1efebfa259114a8737120292011b78cf0f7c96fd3e16d5e7d
Files
-
0983b26318b282c1efebfa259114a8737120292011b78cf0f7c96fd3e16d5e7d.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ktlju Size: 4KB - Virtual size: 4KB
.wu Size: 512B - Virtual size: 4KB