Behavioral task
behavioral1
Sample
665bd5ea8bb0de8279fb40a8b2863b95f32790f7e11c6300e8fa48d3390ae762.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
665bd5ea8bb0de8279fb40a8b2863b95f32790f7e11c6300e8fa48d3390ae762.exe
Resource
win10v2004-20240611-en
General
-
Target
665bd5ea8bb0de8279fb40a8b2863b95f32790f7e11c6300e8fa48d3390ae762
-
Size
315KB
-
MD5
5a03dd0987a7a9a31f0ecf94cafe4a59
-
SHA1
32791ab3ec73881ee94dbb00edcf7a633accaa73
-
SHA256
665bd5ea8bb0de8279fb40a8b2863b95f32790f7e11c6300e8fa48d3390ae762
-
SHA512
7c86ad6d1d694b1b32e98bcbe3fe18e3a96336cf363e755b583657b3120487d3e3fe05aee941d8a27ee721ad928913bfada3dc1a8e5e25a84ae0f41f0f6845ed
-
SSDEEP
3072:dsgCullUQN7gsBh1LLQikygCullUQN7gsBh1L1v:dLleK771Q/RleK7715
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 665bd5ea8bb0de8279fb40a8b2863b95f32790f7e11c6300e8fa48d3390ae762
Files
-
665bd5ea8bb0de8279fb40a8b2863b95f32790f7e11c6300e8fa48d3390ae762.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE