Static task
static1
Behavioral task
behavioral1
Sample
dc65671fbbea6f56e63ec4fe8c0f6282daa9509e684dc122a0227f8332457e21.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
dc65671fbbea6f56e63ec4fe8c0f6282daa9509e684dc122a0227f8332457e21.exe
Resource
win10v2004-20240426-en
General
-
Target
dc65671fbbea6f56e63ec4fe8c0f6282daa9509e684dc122a0227f8332457e21
-
Size
131KB
-
MD5
6ba738954d5108827fd392dadc007bd2
-
SHA1
e020de2f9100ec847eff4cfe54c97fdd6953e597
-
SHA256
dc65671fbbea6f56e63ec4fe8c0f6282daa9509e684dc122a0227f8332457e21
-
SHA512
d7f9a96c301f600130317aba372b2773e61ae02df3f40c9125a8bac7052069a85db5c3506f6cf186e0d5090fc9cf4e9863d0ee556e9283ded7cfaa19d1820d63
-
SSDEEP
3072:rEboFVlGAvwsgbpvYfMTc72L10fPsout6nn:4BzsgbpvnTcyOPsoS6nn
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dc65671fbbea6f56e63ec4fe8c0f6282daa9509e684dc122a0227f8332457e21
Files
-
dc65671fbbea6f56e63ec4fe8c0f6282daa9509e684dc122a0227f8332457e21.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.5dh Size: - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bfh Size: 123KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE