Behavioral task
behavioral1
Sample
2f45b45c2f4c8d1351354f0162453c7cac4256d33445bd1cd318a764211f1e1c.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
2f45b45c2f4c8d1351354f0162453c7cac4256d33445bd1cd318a764211f1e1c.exe
Resource
win10v2004-20231020-en
General
-
Target
2f45b45c2f4c8d1351354f0162453c7cac4256d33445bd1cd318a764211f1e1c
-
Size
2.7MB
-
MD5
cce9ed2ffed2a08b57d51ba70730461f
-
SHA1
33b49d520590c7048360cb478b5612ecd1456595
-
SHA256
2f45b45c2f4c8d1351354f0162453c7cac4256d33445bd1cd318a764211f1e1c
-
SHA512
c96b03e5f94e2ca293ec9f0e051869937041f72f09e409d88bab02d7adcafd3bc14052cf37d7e517b113decad49a555f9e9b212f04685284fe681c15d5272112
-
SSDEEP
49152:4hAxJwlsiAk3uK+JajOFeKnZS/pFsAnnDtJ4IJ5ZhF9hx+s8KuqGaX0ToIBAUZL1:yBsiAk3uK+JcOFeKnZ+F/nnDlD9h6JB1
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f45b45c2f4c8d1351354f0162453c7cac4256d33445bd1cd318a764211f1e1c
Files
-
2f45b45c2f4c8d1351354f0162453c7cac4256d33445bd1cd318a764211f1e1c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 3.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE