Behavioral task
behavioral1
Sample
e312cb2da3316d16f2f6e91f17dfb2dace07abcddae0e75acdbe4d73a02a9740.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
e312cb2da3316d16f2f6e91f17dfb2dace07abcddae0e75acdbe4d73a02a9740.exe
Resource
win10v2004-20240426-en
General
-
Target
e312cb2da3316d16f2f6e91f17dfb2dace07abcddae0e75acdbe4d73a02a9740
-
Size
41KB
-
MD5
8fa486382e784264649ddaeb3badf073
-
SHA1
d60295a021e3544d6c49d1e9721034b153624c2f
-
SHA256
e312cb2da3316d16f2f6e91f17dfb2dace07abcddae0e75acdbe4d73a02a9740
-
SHA512
aa40f2a23a47211b15e9ba35b418486496b8b0cefb6bb58ccfcf2d0ba6c1a1cdc413b042f2c4c84bb4ed5ffc9993a48084a2942c51530a4f47172c1a2006e9aa
-
SSDEEP
384:MZcaoPBXkIq5ozV/N4Yz+uFinrN0eSMovEkAQ52y:MiPPTYiNCQF2NSEkF
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e312cb2da3316d16f2f6e91f17dfb2dace07abcddae0e75acdbe4d73a02a9740
Files
-
e312cb2da3316d16f2f6e91f17dfb2dace07abcddae0e75acdbe4d73a02a9740.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE