Behavioral task
behavioral1
Sample
64658bbae61bb0c82d93d6ad3ac6b6c06b1d160a91bb14e70f420825d7fb10ff.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
64658bbae61bb0c82d93d6ad3ac6b6c06b1d160a91bb14e70f420825d7fb10ff.exe
Resource
win10v2004-20240508-en
General
-
Target
64658bbae61bb0c82d93d6ad3ac6b6c06b1d160a91bb14e70f420825d7fb10ff
-
Size
592KB
-
MD5
9614225a8db95a2ef4ed6947e5efa7be
-
SHA1
2fd083913b031d23cc0099c5de6ea8354c9ecd16
-
SHA256
64658bbae61bb0c82d93d6ad3ac6b6c06b1d160a91bb14e70f420825d7fb10ff
-
SHA512
34e55c8f59b2c3506684fdd6686ee10f4a3cc757ff81d881c609f45063d5c3ec7fd620e4cd4ae9ab8e0b0db52559984b15c43944f35385c663a62a96fb6c8076
-
SSDEEP
12288:wcWRJxhIUKofd9S88itJsL6s8GwUF81yn0FI/6IC0XoS9:TW/xhIUKofSytJsL6HUP0OHCq
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64658bbae61bb0c82d93d6ad3ac6b6c06b1d160a91bb14e70f420825d7fb10ff
Files
-
64658bbae61bb0c82d93d6ad3ac6b6c06b1d160a91bb14e70f420825d7fb10ff.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 3.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 584KB - Virtual size: 584KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE