Behavioral task
behavioral1
Sample
2fd21fd270c7e85a67b681411b8cb96c4feb8950d08916480bc40f61c6ea5c81.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
2fd21fd270c7e85a67b681411b8cb96c4feb8950d08916480bc40f61c6ea5c81.exe
Resource
win10v2004-20230703-en
General
-
Target
2fd21fd270c7e85a67b681411b8cb96c4feb8950d08916480bc40f61c6ea5c81
-
Size
361KB
-
MD5
c9e49d4eb77328dfafdfeb362daabaad
-
SHA1
7567276df9149895ed28694a74cc27841108b308
-
SHA256
2fd21fd270c7e85a67b681411b8cb96c4feb8950d08916480bc40f61c6ea5c81
-
SHA512
f57d5f0913c5f0dd8ab1d42718d78e6f619e0ff9ac9aa18c82e2c92b6b5fc8d81c55d44071015af157ff56ec3c3b0051f183d7509ff46db1a6020a35fc8998f1
-
SSDEEP
6144:f+Shfmg9CHooSTw6BLydLGM4++s++j++/++S++Wr:+s2ooSTwAe9GG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2fd21fd270c7e85a67b681411b8cb96c4feb8950d08916480bc40f61c6ea5c81
Files
-
2fd21fd270c7e85a67b681411b8cb96c4feb8950d08916480bc40f61c6ea5c81.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 816KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 291KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 69KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE