Behavioral task
behavioral1
Sample
2d59ad2305ff38beccb041a9d3483c9b1ac9b847f8b3164433b069e094955101.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
2d59ad2305ff38beccb041a9d3483c9b1ac9b847f8b3164433b069e094955101.exe
Resource
win10v2004-20230703-en
General
-
Target
2d59ad2305ff38beccb041a9d3483c9b1ac9b847f8b3164433b069e094955101
-
Size
1016KB
-
MD5
4b5b96e3557435d72585731105d72e81
-
SHA1
3437df296a5617bf000235dd8e0a729c7d329b85
-
SHA256
2d59ad2305ff38beccb041a9d3483c9b1ac9b847f8b3164433b069e094955101
-
SHA512
7fb1b8d0f9a26efc9f187362e370f14b5d09a1a0624eb03345531e3b6a9c12fd5c1d60c39540c9317898712ef6cf3a05b58f27b9ec69130ac8dc0d4cdce8fa3f
-
SSDEEP
24576:aT/QAOak+21GRV4aHvVOq3WKGNRWO3KDBnLTJ:IIJ91GRVvVNmrnl6Dv
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2d59ad2305ff38beccb041a9d3483c9b1ac9b847f8b3164433b069e094955101
Files
-
2d59ad2305ff38beccb041a9d3483c9b1ac9b847f8b3164433b069e094955101.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 946KB - Virtual size: 948KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 69KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE