Behavioral task
behavioral1
Sample
2402dd1e6045d20b2b081f917856914a84a2f8ef6858e7903848361379e6fc69.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
2402dd1e6045d20b2b081f917856914a84a2f8ef6858e7903848361379e6fc69.exe
Resource
win10v2004-20230915-en
General
-
Target
2402dd1e6045d20b2b081f917856914a84a2f8ef6858e7903848361379e6fc69
-
Size
1.1MB
-
MD5
338f85bda9b95502aef6ec313e665a4f
-
SHA1
8379ac832203734107bccdd52dec2a8f7c530a06
-
SHA256
2402dd1e6045d20b2b081f917856914a84a2f8ef6858e7903848361379e6fc69
-
SHA512
d568199fe5c26dc1f512807c463872d16da473e1db75900c902537400cb836392a084334600b652f6aea2d6aae7330b56114a0a269a5c4bf9d317575085b7dfc
-
SSDEEP
24576:w45573KAvyJtLiZJoaKYJGxRRJZKVwF6ZLiEI9BjaDX/frm:FbLGU7/IPZKU6ZGgX3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2402dd1e6045d20b2b081f917856914a84a2f8ef6858e7903848361379e6fc69
Files
-
2402dd1e6045d20b2b081f917856914a84a2f8ef6858e7903848361379e6fc69.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE