Behavioral task
behavioral1
Sample
f96f6a02aa092aedcd6c966a771a47436fb4dddb71ad601861f0ccef3d489099.exe
Resource
win7-20240221-en
General
-
Target
f96f6a02aa092aedcd6c966a771a47436fb4dddb71ad601861f0ccef3d489099
-
Size
381KB
-
MD5
1e594285a6c8af80156e094b46df9886
-
SHA1
96ba9aa37f4e56ac3de392805463e726f664c027
-
SHA256
f96f6a02aa092aedcd6c966a771a47436fb4dddb71ad601861f0ccef3d489099
-
SHA512
47d58e4eb917a97a7fdca75077238969a41bbbda99129f2f4b64cb6bf0c28bbf456ee0022539003481a20af68c6436c1918ad6880bc2681879f33a01044fb2ef
-
SSDEEP
6144:kcm4FmowdHoSphraHcpOaKHpSwp9OD0IbswYTOZ:y4wFHoS3eFaKHpNKbbsweOZ
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f96f6a02aa092aedcd6c966a771a47436fb4dddb71ad601861f0ccef3d489099
Files
-
f96f6a02aa092aedcd6c966a771a47436fb4dddb71ad601861f0ccef3d489099.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tkjdelw Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE