Behavioral task
behavioral1
Sample
2411b3eea69b39dcde519facfc6ec7ddc6febfdd9976845d4bb5fa0d3e2e327a.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
2411b3eea69b39dcde519facfc6ec7ddc6febfdd9976845d4bb5fa0d3e2e327a.exe
Resource
win10v2004-20230703-en
General
-
Target
2411b3eea69b39dcde519facfc6ec7ddc6febfdd9976845d4bb5fa0d3e2e327a
-
Size
2.5MB
-
MD5
af40fa6a7e14fabcfb38aa0307bbf3e7
-
SHA1
ea1173d4df90c8d15e59805190a50dddc490a14b
-
SHA256
2411b3eea69b39dcde519facfc6ec7ddc6febfdd9976845d4bb5fa0d3e2e327a
-
SHA512
c4da3bfff8cb318048aa3428b74809ddc0b791293ba8ec283d3f7a5d31743251f48ce00e109f251a4616ad937584337009e5d060a3f7dcaacb39b4a73c3b74db
-
SSDEEP
49152:a4C78OH6Azx9SbsWf+Ge/sujbe45DRFeq/u5alXWvw23jnBCiRpHo4G6aZZk:aoLAzqbHsPjqeKoMx9CiRpH/bYZk
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2411b3eea69b39dcde519facfc6ec7ddc6febfdd9976845d4bb5fa0d3e2e327a
Files
-
2411b3eea69b39dcde519facfc6ec7ddc6febfdd9976845d4bb5fa0d3e2e327a.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.7MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 281KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE