Behavioral task
behavioral1
Sample
a6de2fb64c5ce5e477269af9f9482f0447eedc42ce21e60cf288254486d3219e.exe
Resource
win7-20240220-en
General
-
Target
a6de2fb64c5ce5e477269af9f9482f0447eedc42ce21e60cf288254486d3219e.exe
-
Size
171KB
-
MD5
feef5b22e42e719206e0a88510fee2b7
-
SHA1
480266cc35f6d3f9188b3733ccbf4f3c046056bb
-
SHA256
a6de2fb64c5ce5e477269af9f9482f0447eedc42ce21e60cf288254486d3219e
-
SHA512
c2790644e1e96af12245cfa42f1539059d08b0f5a0dd9bc674e3a0542f2d335b91ddfa00fc10c385cedf8b3fe5719af27aa647ac26b4f14f2ea37ee2b404abc5
-
SSDEEP
3072:R4VdMg2RRNnQTYaWKZCkv0c3bl8pEIklz7cplYhh0LsyATByouto:iARRNQTYBKAkv088el3cpOhh0LnoSo
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a6de2fb64c5ce5e477269af9f9482f0447eedc42ce21e60cf288254486d3219e.exe
Files
-
a6de2fb64c5ce5e477269af9f9482f0447eedc42ce21e60cf288254486d3219e.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 660KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 168KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 664B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ