Behavioral task
behavioral1
Sample
90d6e6c07a8f843070949458495b22753fe006d66386598989f1cb75823a5ad4.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
90d6e6c07a8f843070949458495b22753fe006d66386598989f1cb75823a5ad4.exe
Resource
win10v2004-20240508-en
General
-
Target
90d6e6c07a8f843070949458495b22753fe006d66386598989f1cb75823a5ad4
-
Size
129KB
-
MD5
00a3e243ad3b0e86bff7e7f016b837f4
-
SHA1
4f0f86e72306a653a53c3630c67e356a4e4c7f5d
-
SHA256
90d6e6c07a8f843070949458495b22753fe006d66386598989f1cb75823a5ad4
-
SHA512
305fbfb7839202cfe86074a5c51709a7c38f2726c11d27bcd8addce05c7ebf9360fdf7e30b318bd538a095c483f7a90d5e3221e7694f462d5afcca1d6450bf28
-
SSDEEP
1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8Q8/8RYlaaGaaeTWn1++PJHJXA/OsIZf5:fnyiQSoskRYjQSoskRYa
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 90d6e6c07a8f843070949458495b22753fe006d66386598989f1cb75823a5ad4
Files
-
90d6e6c07a8f843070949458495b22753fe006d66386598989f1cb75823a5ad4.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE