Behavioral task
behavioral1
Sample
77a927c2e5f3df45e2be76917cb8bf8c7fa4e0db5f1317bacb0237e10e2f21cd.exe
Resource
win7-20240221-en
General
-
Target
77a927c2e5f3df45e2be76917cb8bf8c7fa4e0db5f1317bacb0237e10e2f21cd
-
Size
255KB
-
MD5
3772c9bdf27b2bb6b496adde9a3d2069
-
SHA1
bb194442ed6732b5fdbbf746057b6921203c8c15
-
SHA256
77a927c2e5f3df45e2be76917cb8bf8c7fa4e0db5f1317bacb0237e10e2f21cd
-
SHA512
9518403860e89c7f8cc23769fdd0648e4dd43a504100bf3f6fc2e72eeeda258192fd683e7045627b2238520ffaff36d5d39bbfe209f3a69faf8763b03ac7be3b
-
SSDEEP
6144:kcm4FmowdHoSphraHcpOaKHpolTjZXvEQo9dfrA:y4wFHoS3eFaKHpKT9XvEhdfrA
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 77a927c2e5f3df45e2be76917cb8bf8c7fa4e0db5f1317bacb0237e10e2f21cd
Files
-
77a927c2e5f3df45e2be76917cb8bf8c7fa4e0db5f1317bacb0237e10e2f21cd.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tkjdelw Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE