Behavioral task
behavioral1
Sample
2c2f3fd70664207943844262992a5b90ad6d8a52bab6b3c0268aa314c1a3fe66.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
2c2f3fd70664207943844262992a5b90ad6d8a52bab6b3c0268aa314c1a3fe66.exe
Resource
win10v2004-20230703-en
General
-
Target
2c2f3fd70664207943844262992a5b90ad6d8a52bab6b3c0268aa314c1a3fe66
-
Size
512KB
-
MD5
486fb3e996852468756047abc93c8757
-
SHA1
ae92371085fb950e457e80581deb2ab27316f30e
-
SHA256
2c2f3fd70664207943844262992a5b90ad6d8a52bab6b3c0268aa314c1a3fe66
-
SHA512
7e1aaf0e1e2171010c0049c30db15537249797d15f6c14bedfd8f2b1b3308ebaeae574f10661e303e49bf517a7b0d337e2b168f6f7361a8fc919758f97b8d23e
-
SSDEEP
3072:yfGNalu4LuHaCoutY3gL9f7nDVF6PUp1YoPiCe:VNalu46hoSY3a9fzDVl5Ve
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c2f3fd70664207943844262992a5b90ad6d8a52bab6b3c0268aa314c1a3fe66
Files
-
2c2f3fd70664207943844262992a5b90ad6d8a52bab6b3c0268aa314c1a3fe66.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 876KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 408KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 103KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE