Behavioral task
behavioral1
Sample
248908f4b1720ea5efa4385257216002b67cc4ae6d93fab66cf6858bf85e7e10.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
248908f4b1720ea5efa4385257216002b67cc4ae6d93fab66cf6858bf85e7e10.exe
Resource
win10v2004-20240802-en
General
-
Target
248908f4b1720ea5efa4385257216002b67cc4ae6d93fab66cf6858bf85e7e10
-
Size
14.0MB
-
MD5
957bdbc41319852a5c6c998434ef1c87
-
SHA1
438af5caf05b2b9d24e66f903b5e2f128bf78413
-
SHA256
248908f4b1720ea5efa4385257216002b67cc4ae6d93fab66cf6858bf85e7e10
-
SHA512
1dbf2e07d8b8368cdf8590f762c0a2ffe6db09e803a40f3cfd0df173a4c8185045d62c1b266266fed2eb744fabcd72ce2434418b25665c3da601c53b90a83f65
-
SSDEEP
393216:sbTza+KQPleH8eRYcZ4/IwcHT63a8/ILW:d+lPe/ZTz6UC
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 248908f4b1720ea5efa4385257216002b67cc4ae6d93fab66cf6858bf85e7e10
Files
-
248908f4b1720ea5efa4385257216002b67cc4ae6d93fab66cf6858bf85e7e10.exe windows:6 windows x64 arch:x64
5f20a62165f5e62a0d9dbbcc9fc08d78
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
ws2_32
WSAGetLastError
kernel32
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
Sections
.text Size: - Virtual size: 455KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 165KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.gfids Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.UPX0 Size: - Virtual size: 8.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.UPX1 Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.UPX2 Size: 13.8MB - Virtual size: 13.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 272B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 176KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ