Behavioral task
behavioral1
Sample
296b118417677b26cecea6bea0bffc3ef1e88ee6c17c54d2dd1f58043d24d3e1.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
296b118417677b26cecea6bea0bffc3ef1e88ee6c17c54d2dd1f58043d24d3e1.exe
Resource
win10v2004-20240802-en
General
-
Target
296b118417677b26cecea6bea0bffc3ef1e88ee6c17c54d2dd1f58043d24d3e1
-
Size
13.9MB
-
MD5
21d9ad01b2068b43f22c04d24092a59e
-
SHA1
4ddedb45d929fa493795116dbc2ff6f8f18a1a2a
-
SHA256
296b118417677b26cecea6bea0bffc3ef1e88ee6c17c54d2dd1f58043d24d3e1
-
SHA512
a72a62aac91552dbb8da5f063ed1aea7354f80a4655a58ea93715f5bd4e17b7793cba75bb47dac70372771b01c6a86ca5c90fa2e5a72bb4105d9966474f521d1
-
SSDEEP
393216:bdjnhp8hjlaAWgMv7raLTnMkaaxLkk4XxVzQY:bZ/8hjlzWgMv7WLTnB3xLkk4XxVzj
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 296b118417677b26cecea6bea0bffc3ef1e88ee6c17c54d2dd1f58043d24d3e1
Files
-
296b118417677b26cecea6bea0bffc3ef1e88ee6c17c54d2dd1f58043d24d3e1.exe windows:6 windows x64 arch:x64
5f20a62165f5e62a0d9dbbcc9fc08d78
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
ws2_32
WSAGetLastError
kernel32
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
Sections
.text Size: - Virtual size: 455KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 165KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.gfids Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.UPX0 Size: - Virtual size: 8.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.UPX1 Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.UPX2 Size: 13.8MB - Virtual size: 13.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 284B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 176KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ