Behavioral task
behavioral1
Sample
2df680f2f89071836c83f6b6d300c286b01d3311e8605ffe0b25d28a918d7b3f.exe
Resource
win7-20230831-en
General
-
Target
2df680f2f89071836c83f6b6d300c286b01d3311e8605ffe0b25d28a918d7b3f
-
Size
1.4MB
-
MD5
ca211728114d3a87f9f4d483f1a3c661
-
SHA1
207bceef60bdeea45ed794bf9173c72e532de68f
-
SHA256
2df680f2f89071836c83f6b6d300c286b01d3311e8605ffe0b25d28a918d7b3f
-
SHA512
18ff6c95176d9f46f8c77e82b5ae263a0660e56dfa6904f5cfa2ac910965338c51b685929403b3c0ca3975a182a9dd54c750d40d5b3dea7ea1dedb35a3ad6add
-
SSDEEP
24576:wu8hw65wElFc3bBTszFCF0S/+oUBJRemVwBumNgvQ0JatN9H/lbg/HRk4MTfEhZg:wuL6hcFTcFcMXV6aQjtivRk4ygy
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2df680f2f89071836c83f6b6d300c286b01d3311e8605ffe0b25d28a918d7b3f
Files
-
2df680f2f89071836c83f6b6d300c286b01d3311e8605ffe0b25d28a918d7b3f.exe windows:4 windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 41KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE