Behavioral task
behavioral1
Sample
8ff3f2661b5824d6d8fb52a50122cb05a61667ecf16500332153f740b038f19c.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
8ff3f2661b5824d6d8fb52a50122cb05a61667ecf16500332153f740b038f19c.exe
Resource
win10v2004-20240508-en
General
-
Target
8ff3f2661b5824d6d8fb52a50122cb05a61667ecf16500332153f740b038f19c
-
Size
285KB
-
MD5
ba39f87a497dbc2e8482323137ddd6db
-
SHA1
065808f84ca127f9177b62fbc107d2db7a0b908b
-
SHA256
8ff3f2661b5824d6d8fb52a50122cb05a61667ecf16500332153f740b038f19c
-
SHA512
ae5831aaf6b64ed4a8da9266e12be3c2ed49aa1f344bf0e3978d1de6e9b1a5f995d9c1d2baff36554a9a9c98ef9db2972857370d6df39de6c780fa0c5012109b
-
SSDEEP
6144:bFknChVMP3senHAc93HaJYX65G493pPh3fRe+4qVOoS:bFfV0DHAc9KJYXit3th35yqVOoS
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8ff3f2661b5824d6d8fb52a50122cb05a61667ecf16500332153f740b038f19c
Files
-
8ff3f2661b5824d6d8fb52a50122cb05a61667ecf16500332153f740b038f19c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 608KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 276KB - Virtual size: 276KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE