Behavioral task
behavioral1
Sample
79c9f370088fa0afd0bda43efa53152b7daa0df13505c92185ffebbfd3b2e235.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
79c9f370088fa0afd0bda43efa53152b7daa0df13505c92185ffebbfd3b2e235.exe
Resource
win10v2004-20240508-en
General
-
Target
79c9f370088fa0afd0bda43efa53152b7daa0df13505c92185ffebbfd3b2e235
-
Size
147KB
-
MD5
5518ca4559a9c9e8c19173d4bad194a2
-
SHA1
d340b80765a3c5d2c4864e10fe46cee031d548b0
-
SHA256
79c9f370088fa0afd0bda43efa53152b7daa0df13505c92185ffebbfd3b2e235
-
SHA512
b68572fda98fa055aba1f2232af035ef10b1413b8d60dd908b9d86ca52604076101759a784ca39ca76a9df82c5948aada160b2c1db9780fb9b30b7eb36573664
-
SSDEEP
1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8asUs8w2wETmXadjUSbcDemTPAZk+cLt3:fnyiQSohsUs8w2wE6W2QZwKS7b
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 79c9f370088fa0afd0bda43efa53152b7daa0df13505c92185ffebbfd3b2e235
Files
-
79c9f370088fa0afd0bda43efa53152b7daa0df13505c92185ffebbfd3b2e235.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE