Behavioral task
behavioral1
Sample
kug5656.exe
Resource
win7-20240903-en
General
-
Target
kug5656.exe
-
Size
135KB
-
MD5
63783ce69692a6789cd2894b21970ccf
-
SHA1
a8f28575f49af51b4b1729e4e8fe9caa57b7f81d
-
SHA256
3bad8d2ebb231d8c337d15ba83065924e704a5aae8a0eaedbbe3dd32209b1c96
-
SHA512
bc7c1933810cab003cf16ea4168eea0979a7463ee2a9e84dfe5609347ae46594a87ef6a9ce377a0d1c8ce2696f61a749501775444351d158341739705af13ae2
-
SSDEEP
1536:YGYU/W2/HG6QMauSV3ixJJ8dLrmhH7i9eNOOV0GqMIK7aGZhPOnW:YfU/WF6QMauSuJoWNi9eNOs007NZpOnW
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource kug5656.exe
Files
-
kug5656.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 64KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 38KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE