Behavioral task
behavioral1
Sample
2661d0a56faf5508d047736f074308c54a202d2019ce1955a2b349b08c5a43df.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
2661d0a56faf5508d047736f074308c54a202d2019ce1955a2b349b08c5a43df.exe
Resource
win10v2004-20231025-en
General
-
Target
2661d0a56faf5508d047736f074308c54a202d2019ce1955a2b349b08c5a43df
-
Size
2.3MB
-
MD5
5c077fb807005c9ddd027f1722723333
-
SHA1
d208aaa2e34041e1d3a5e6500146c9f1ee6cf0a4
-
SHA256
2661d0a56faf5508d047736f074308c54a202d2019ce1955a2b349b08c5a43df
-
SHA512
7c46062713b07c38644506e761abdb39e2ddb2b599989e463710c430fa0809e984e030cb62e952ce7f551d305d8334f223f061da14583d190d0615fc0b5101f3
-
SSDEEP
49152:WZ7mJOJVFwOhQ2IVAFVUz7CqE2cF3dtaSCrL:smcJVe2ImFqhEX3dYr
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2661d0a56faf5508d047736f074308c54a202d2019ce1955a2b349b08c5a43df
Files
-
2661d0a56faf5508d047736f074308c54a202d2019ce1955a2b349b08c5a43df.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 2KB - Virtual size: 3.1MB
IMAGE_SCN_MEM_READ
VProtect Size: 615KB - Virtual size: 616KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
VProtect Size: 159KB - Virtual size: 160KB
IMAGE_SCN_MEM_READ