Behavioral task
behavioral1
Sample
40014ad8c06155e88f1cab9f33af5d2b17f69e3a2e54adc00a91c7019671470b.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
40014ad8c06155e88f1cab9f33af5d2b17f69e3a2e54adc00a91c7019671470b.exe
Resource
win10v2004-20240426-en
General
-
Target
40014ad8c06155e88f1cab9f33af5d2b17f69e3a2e54adc00a91c7019671470b
-
Size
157KB
-
MD5
0202235659d1870c967b3b29e40d6940
-
SHA1
d94da0d1f0118f8ca37c51fbc317fde7d74f1ad6
-
SHA256
40014ad8c06155e88f1cab9f33af5d2b17f69e3a2e54adc00a91c7019671470b
-
SHA512
5bb3528fed6cf41270f3ec39ec650e6b9bfcee2c42f7ffe591c323fc5e613fc977e91762ce1573c8afd165dca689b4ffbad12a58ec917a47088c3b3f8086dcf3
-
SSDEEP
1536:67Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8Ycn4Q7+a7BzOIPU5euUTOByljJWq9ijC:+nyiQSobcnbPw5eBjJt
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 40014ad8c06155e88f1cab9f33af5d2b17f69e3a2e54adc00a91c7019671470b
Files
-
40014ad8c06155e88f1cab9f33af5d2b17f69e3a2e54adc00a91c7019671470b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE