Behavioral task
behavioral1
Sample
2225d0fc2fca034600e7972329a636a0743cc31e7c71f1ea98bb05c1e70613c2.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
2225d0fc2fca034600e7972329a636a0743cc31e7c71f1ea98bb05c1e70613c2.exe
Resource
win10v2004-20231023-en
General
-
Target
2225d0fc2fca034600e7972329a636a0743cc31e7c71f1ea98bb05c1e70613c2
-
Size
2.6MB
-
MD5
88bf0395130743b537bc8198690c284e
-
SHA1
005b9eee69fedf347409047cab8e8121ff900531
-
SHA256
2225d0fc2fca034600e7972329a636a0743cc31e7c71f1ea98bb05c1e70613c2
-
SHA512
345e9b46e3286c347c44007277576cae5be9e7226422f10fdc508da8e2a2b12a3f01db178991150aab12b0c88bb5de47ad5cfe8afbd72a8edd611030d973175c
-
SSDEEP
49152:/01y5kldZgp+wfFTd+jFcaMNw/qccdMOkAuMst8ztlrlh3n9DuD5FiHmHl1qk:M1y5kbuUwc2pkRMuerlZn9DuDTImHjqk
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2225d0fc2fca034600e7972329a636a0743cc31e7c71f1ea98bb05c1e70613c2
Files
-
2225d0fc2fca034600e7972329a636a0743cc31e7c71f1ea98bb05c1e70613c2.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.7MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 281KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE