Behavioral task
behavioral1
Sample
2f57269438f1bb76f2fe6eeeec2716f2094f410d3e3c614d39b2fb36f8521711.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
2f57269438f1bb76f2fe6eeeec2716f2094f410d3e3c614d39b2fb36f8521711.exe
Resource
win10v2004-20230703-en
General
-
Target
2f57269438f1bb76f2fe6eeeec2716f2094f410d3e3c614d39b2fb36f8521711
-
Size
10.8MB
-
MD5
15671edbdb421daadfea3ce412ded8cc
-
SHA1
197d8b519ceacd63c04145053a985f8ff5a718bf
-
SHA256
2f57269438f1bb76f2fe6eeeec2716f2094f410d3e3c614d39b2fb36f8521711
-
SHA512
e0ec117d349516162f9039bf9d77623b7f73f5246acc8e118fe537b25a273f3de7416a3c0f4b4ebcb45510e088fbf077463160ae7cde493a0861f98b615711c1
-
SSDEEP
196608:+aXmfsI2mPtpRRnCUO11y1k9fBkPftsXR5ZS47lkS2vUB/YMm7ZIY+BD8:+aXmkeRng11ySOf2fkM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f57269438f1bb76f2fe6eeeec2716f2094f410d3e3c614d39b2fb36f8521711
Files
-
2f57269438f1bb76f2fe6eeeec2716f2094f410d3e3c614d39b2fb36f8521711.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 3.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 10.8MB - Virtual size: 10.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE