Behavioral task
behavioral1
Sample
82df66874ab0d25baecaca853defa36deea563e097652daf6cdcdfa9ac30f3e1.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
82df66874ab0d25baecaca853defa36deea563e097652daf6cdcdfa9ac30f3e1.exe
Resource
win10v2004-20240508-en
General
-
Target
82df66874ab0d25baecaca853defa36deea563e097652daf6cdcdfa9ac30f3e1
-
Size
1.6MB
-
MD5
9e9adee6f3565438e4b0433ff9cba196
-
SHA1
e356402dd04128eb4f3a84e604b3fed3d50124ba
-
SHA256
82df66874ab0d25baecaca853defa36deea563e097652daf6cdcdfa9ac30f3e1
-
SHA512
4fb29588297592c191238c20d245d6489e6e011497bb0c1e9ced6c9e0267c96483d960d6fb69493c70599e8eb7b7b94036a3e61b533826ad7c51ae3b0c2b3e83
-
SSDEEP
24576:l8uB9+RRFqBPs3sgoKwDP0zuD7c8vMu5uCf/TMOeNsR+XHfjx7Pd2AclfuZZbjXp:+uBczFqNs3spKPuPvRb4NRXHfVdrZZjp
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 82df66874ab0d25baecaca853defa36deea563e097652daf6cdcdfa9ac30f3e1
Files
-
82df66874ab0d25baecaca853defa36deea563e097652daf6cdcdfa9ac30f3e1.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
8xGaDB Size: 388KB - Virtual size: 224KB