Behavioral task
behavioral1
Sample
72919ee40b1def2caaa452a5da5f61f155add5c6c2fa192e957d75c36840c8bf.exe
Resource
win7-20240221-en
General
-
Target
72919ee40b1def2caaa452a5da5f61f155add5c6c2fa192e957d75c36840c8bf
-
Size
59KB
-
MD5
390d8afa41dbd1c1f91733e70cce1c67
-
SHA1
9d2565274fa53b698de58d4c4daacd90d6d14063
-
SHA256
72919ee40b1def2caaa452a5da5f61f155add5c6c2fa192e957d75c36840c8bf
-
SHA512
d92f51d449df0d9202c0b98f2e976ab660cd60c7f97ebf4b8dff1368a7440319ff8df09fa3e36d4a3e820e27e15313cd0d5c987108b9b0c3c81874c2086bb683
-
SSDEEP
1536:kvQBeOGtrYS3srx93UBWfwC6Ggnouy8p5yAXNG1mjtREVMO:khOmTsF93UYfwC6GIoutpY918cJ
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 72919ee40b1def2caaa452a5da5f61f155add5c6c2fa192e957d75c36840c8bf
Files
-
72919ee40b1def2caaa452a5da5f61f155add5c6c2fa192e957d75c36840c8bf.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tkjdelw Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE