Behavioral task
behavioral1
Sample
HTTP-FZxXxB2WktXYnnH0U7-9e04a788281c727566873d9df263aec1.exe
Resource
win10-20240404-en
Behavioral task
behavioral2
Sample
HTTP-FZxXxB2WktXYnnH0U7-9e04a788281c727566873d9df263aec1.exe
Resource
win10v2004-20240226-en
General
-
Target
HTTP-FZxXxB2WktXYnnH0U7-9e04a788281c727566873d9df263aec1.exe
-
Size
579KB
-
MD5
f699081eeaefee25e27c199f18d64ef6
-
SHA1
f4b7e74702a69f340c0af52915a4f5a564876985
-
SHA256
b0c910b57b249c5f85320018ef7ff7d293b7257e293879588b0e79c260121c8c
-
SHA512
de6897f7d95be99dfa01566344f2d6f9abe9d267978034313686f7c6273a2968700518ff00a473c006048e375b2b3c4a289956f2a927269faebe61be937d0dd3
-
SSDEEP
12288:LTajUSWV8C41YQinvA2VWl6ojM+n4PN/bxnqqc8ock0bjsQ9hCKDuh:SAV8C4wnY96wM+4lP7bjnuh
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource HTTP-FZxXxB2WktXYnnH0U7-9e04a788281c727566873d9df263aec1.exe
Files
-
HTTP-FZxXxB2WktXYnnH0U7-9e04a788281c727566873d9df263aec1.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 9.0MB - Virtual size: 112KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE
UPX1 Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.A.Vi.RA Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.F.U.C.K Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE