Behavioral task
behavioral1
Sample
a2ad542f8f86117e5fc8e344d2a6644eb22cb3973e7f8145a217e76f8c197683.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a2ad542f8f86117e5fc8e344d2a6644eb22cb3973e7f8145a217e76f8c197683.exe
Resource
win10v2004-20240426-en
General
-
Target
a2ad542f8f86117e5fc8e344d2a6644eb22cb3973e7f8145a217e76f8c197683
-
Size
850KB
-
MD5
2ac63ba91ea19cd5bc8662502404f283
-
SHA1
f04c683606481a4f762aad7429be629610687f28
-
SHA256
a2ad542f8f86117e5fc8e344d2a6644eb22cb3973e7f8145a217e76f8c197683
-
SHA512
e0f4955b6c9aa7e3f3036829fb0de76b62081d09ca570c1420a898e536d56d33f66f1b84d36b9e93f4faae689bd31570008491f8c112ab6952fd037768521571
-
SSDEEP
12288:VEQoSfqtG/YIja77zxCZS3DkAIEvfTMpS1DdUtQF3bA9IF1czDTCuu:VMG/Na77zOS3DkAuS1BUtybAS6E
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a2ad542f8f86117e5fc8e344d2a6644eb22cb3973e7f8145a217e76f8c197683
Files
-
a2ad542f8f86117e5fc8e344d2a6644eb22cb3973e7f8145a217e76f8c197683.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE