Behavioral task
behavioral1
Sample
467139c0772c4c7abefcc5830a7f01c22cdb387d08d0ffad05c7702101ec1ce2.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
467139c0772c4c7abefcc5830a7f01c22cdb387d08d0ffad05c7702101ec1ce2.exe
Resource
win10v2004-20240611-en
General
-
Target
467139c0772c4c7abefcc5830a7f01c22cdb387d08d0ffad05c7702101ec1ce2
-
Size
262KB
-
MD5
2c3de6c55daa8f03129fb18f82114f0b
-
SHA1
4b372a33cec0b29f7187cabc6d355de4731f3b94
-
SHA256
467139c0772c4c7abefcc5830a7f01c22cdb387d08d0ffad05c7702101ec1ce2
-
SHA512
4a8cb70a41ac854d01a6675ed3bee67d84adb70efa19339334ee1bd64a670f2ec6cc45742e18abcd4704dbbf5c15f4e6c8cdfa735e066e0cd626a66bb828582b
-
SSDEEP
6144:ljluQoSv4DSIo5R4nM/40yk7uZYy/n6rZdE1vrw/WRGtz7efig6WVZIr9:lEQoSfqcw6r41vreFtoideIr9
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 467139c0772c4c7abefcc5830a7f01c22cdb387d08d0ffad05c7702101ec1ce2
Files
-
467139c0772c4c7abefcc5830a7f01c22cdb387d08d0ffad05c7702101ec1ce2.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
8xGaDB Size: 388KB - Virtual size: 224KB