Behavioral task
behavioral1
Sample
2679681f3843e7c14d4f0af43a43aeead95abb2f43cb79b850417014aca20fcf.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
2679681f3843e7c14d4f0af43a43aeead95abb2f43cb79b850417014aca20fcf.exe
Resource
win10v2004-20230915-en
General
-
Target
2679681f3843e7c14d4f0af43a43aeead95abb2f43cb79b850417014aca20fcf
-
Size
2.9MB
-
MD5
d3a0b5cadfddf2ceef7d066a88f4c033
-
SHA1
d3e31877bdb81dc5577e8a304387670ea1659604
-
SHA256
2679681f3843e7c14d4f0af43a43aeead95abb2f43cb79b850417014aca20fcf
-
SHA512
934869738a2199009fbb07a1837dc0e8e27af731e83aefaf197841c0079c9408a7f9b9e448fa7379ce46aa27741e1d87991c4703b6376c7bb775a33c07264b23
-
SSDEEP
49152:J2KGfb/ge7J0bCHLMQV4e9xBD5giP1iGb/kERh/kxGnSDdzkJA8QZ74ug6u1847i:JDeV0bCrMQee9xl5goiPEjCw3Q5DgNCD
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2679681f3843e7c14d4f0af43a43aeead95abb2f43cb79b850417014aca20fcf
Files
-
2679681f3843e7c14d4f0af43a43aeead95abb2f43cb79b850417014aca20fcf.exe windows:6 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 90KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE