Behavioral task
behavioral1
Sample
2925fa92a1937e84766bf67155544e0417fb695e64f68f62dce395acc5fe06c7.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2925fa92a1937e84766bf67155544e0417fb695e64f68f62dce395acc5fe06c7.exe
Resource
win10v2004-20240226-en
General
-
Target
2925fa92a1937e84766bf67155544e0417fb695e64f68f62dce395acc5fe06c7
-
Size
386KB
-
MD5
65a64ee813aaf84f232079d74d23295a
-
SHA1
0490a008d00f14169d63ab53132e35f2b64346c2
-
SHA256
2925fa92a1937e84766bf67155544e0417fb695e64f68f62dce395acc5fe06c7
-
SHA512
baa96865fc43ce9bd609137b8ba583f301a1aa6fb388b525e81e5f97b212fd2f0d5a4ef4193877a436c870f19e947c02406da09ec2b5a649d3bba32b69fcf669
-
SSDEEP
6144:6zt8SadHTzjFRVDoyQEVB/u+oSgUfFmPGL:HSuzzjFrDoyQEVBjoSg+GGL
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2925fa92a1937e84766bf67155544e0417fb695e64f68f62dce395acc5fe06c7
Files
-
2925fa92a1937e84766bf67155544e0417fb695e64f68f62dce395acc5fe06c7.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 154KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE