Behavioral task
behavioral1
Sample
db14af55b5dc7fb2869146b80622a42eb0beb2582b06a3237d0f082c02e5fc31.exe
Resource
win7-20240508-en
General
-
Target
db14af55b5dc7fb2869146b80622a42eb0beb2582b06a3237d0f082c02e5fc31
-
Size
820KB
-
MD5
e3268d84bb5d208de27d7fe83b21b9b4
-
SHA1
13f4ad67d1920aee06a4fb2e30673cafbfd0f4a2
-
SHA256
db14af55b5dc7fb2869146b80622a42eb0beb2582b06a3237d0f082c02e5fc31
-
SHA512
34d98c41ab709aab37bfd464dcc8647761d0243b2db5e0d765d6a86b736844aac139ad617d4c87209f6dc1e7a4500c4ca7fe892df23de921476e2ee5304f0895
-
SSDEEP
24576:Px/lYt1pZTHiI/6QluiRvceUmKFerEH7Wko:P3mLjiBimek2
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db14af55b5dc7fb2869146b80622a42eb0beb2582b06a3237d0f082c02e5fc31
Files
-
db14af55b5dc7fb2869146b80622a42eb0beb2582b06a3237d0f082c02e5fc31.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.7MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 723KB - Virtual size: 724KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE