Behavioral task
behavioral1
Sample
5ece41e8c54586859acb59e5f96d1484c973424dc83930b1f2d6f865df8c79d9.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
5ece41e8c54586859acb59e5f96d1484c973424dc83930b1f2d6f865df8c79d9.exe
Resource
win10v2004-20240508-en
General
-
Target
5ece41e8c54586859acb59e5f96d1484c973424dc83930b1f2d6f865df8c79d9
-
Size
57KB
-
MD5
130dbeca76f0d32c7514b1f1db22ed47
-
SHA1
b3820e282070882249657e3974ed018a4e19281a
-
SHA256
5ece41e8c54586859acb59e5f96d1484c973424dc83930b1f2d6f865df8c79d9
-
SHA512
b3d3a7e8166256ca6000c871e01a6305b225ec369abb29ba651567be3648caed68b578acd115401de524c0f6b3568355c4d2a62847c875f5c60ed7b1ce1a6653
-
SSDEEP
768:V7Blpf/FAK65euBT37CPKKQSjyJJjtf8WUtf8WZCqCwzy:V7Zf/FAxTWoJJ2WjWZCqCB
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5ece41e8c54586859acb59e5f96d1484c973424dc83930b1f2d6f865df8c79d9
Files
-
5ece41e8c54586859acb59e5f96d1484c973424dc83930b1f2d6f865df8c79d9.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE