Behavioral task
behavioral1
Sample
80f09c42733dd8c0f8d574507ed64f5c04432ad7079895109843f31434634236.exe
Resource
win7-20240220-en
General
-
Target
80f09c42733dd8c0f8d574507ed64f5c04432ad7079895109843f31434634236
-
Size
486KB
-
MD5
156dc507265f6fe1ae36f28f9245b18a
-
SHA1
3d6264ce07cad7862b0f22db6c017758425f883a
-
SHA256
80f09c42733dd8c0f8d574507ed64f5c04432ad7079895109843f31434634236
-
SHA512
589b7a1a33717c49c6592ae85483afea4d4120dffcf5a1fec7204de3268d25472c85b4b77b3f640934be847e8fcc297c5f935e29cd79307858b092c41cbc8f33
-
SSDEEP
6144:xcm4FmowdHoSkhraHcpOFltH4t+IDvSXrh5g8hZTydOAkOCOu0EajNVBZr6y2WX1:74wFHoSceFp3IDvSbh5nP+aib
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 80f09c42733dd8c0f8d574507ed64f5c04432ad7079895109843f31434634236
Files
-
80f09c42733dd8c0f8d574507ed64f5c04432ad7079895109843f31434634236.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tkjdelw Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ