Behavioral task
behavioral1
Sample
d7aedb1a01755b273327c437fd278c5260745172530d5607d47bb6fda1e90de6.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
d7aedb1a01755b273327c437fd278c5260745172530d5607d47bb6fda1e90de6.exe
Resource
win10v2004-20240426-en
General
-
Target
d7aedb1a01755b273327c437fd278c5260745172530d5607d47bb6fda1e90de6
-
Size
1.7MB
-
MD5
da57f9a0a032a45a175d38968b5f3926
-
SHA1
ddba5b506e3d6598d38b60bce05dc4f3ac044ba3
-
SHA256
d7aedb1a01755b273327c437fd278c5260745172530d5607d47bb6fda1e90de6
-
SHA512
9d231e58f9aba5b1d275c3dcca68ca42705f3ce7d6ef931ed479839310465a9b0340c0cc48e6dd9b7f9aac6f4ba7b1de6c3a12e00622e82baf5f8eed32c3296c
-
SSDEEP
49152:FJftK6Hvu4hjSel3fIr7wl4uw1lrEyR3gQqTl2iq:FJftKHYjT949brEmcTQD
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d7aedb1a01755b273327c437fd278c5260745172530d5607d47bb6fda1e90de6
Files
-
d7aedb1a01755b273327c437fd278c5260745172530d5607d47bb6fda1e90de6.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qhx Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sy Size: 512B - Virtual size: 4KB