Behavioral task
behavioral1
Sample
8267407d6c14ad55a146583e4ae9d55a77e66a5f7f49e4cf44b94bb0e7d1b495.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
8267407d6c14ad55a146583e4ae9d55a77e66a5f7f49e4cf44b94bb0e7d1b495.exe
Resource
win10v2004-20240508-en
General
-
Target
8267407d6c14ad55a146583e4ae9d55a77e66a5f7f49e4cf44b94bb0e7d1b495
-
Size
133KB
-
MD5
14c817bcfeae3c3062e6691d2c178373
-
SHA1
e60dac7e442055d9a6dc0f35271810e3eaa1d72c
-
SHA256
8267407d6c14ad55a146583e4ae9d55a77e66a5f7f49e4cf44b94bb0e7d1b495
-
SHA512
bec1f6a74480a5c74e59f42776c02aebf348b6b85142ddc3bf90e7899db53cadc051b00b7a80d6062de5eb15b50008ed969940e83bede54437041e1be3e6c109
-
SSDEEP
3072:fnyiQSoskRYeQSoskRYDZ/D5zf6ydyf+abMkF24kzK3jbrCkoRWNkzZ/D5zf6ydZ:KiQSo1YeQSo1YH
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8267407d6c14ad55a146583e4ae9d55a77e66a5f7f49e4cf44b94bb0e7d1b495
Files
-
8267407d6c14ad55a146583e4ae9d55a77e66a5f7f49e4cf44b94bb0e7d1b495.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE