Behavioral task
behavioral1
Sample
2a89494983303eb8bf9fa625220455a9.exe
Resource
win7-20231201-en
Behavioral task
behavioral2
Sample
2a89494983303eb8bf9fa625220455a9.exe
Resource
win10v2004-20231201-en
General
-
Target
2a89494983303eb8bf9fa625220455a9
-
Size
3.1MB
-
MD5
2a89494983303eb8bf9fa625220455a9
-
SHA1
c549891de7166d2d433db90089719629d54de910
-
SHA256
aeebdb6b75e077cda3345ac713339a6fc8d594264c59ea26dfe55297b1bdb3ed
-
SHA512
79d6845427747b1fab07413651e26ea3aa1763ecddee21f6a454a1695c1b6dd216532b9337f0b1b64ce0761b769cce60fce93eeb22c4f0a8eb621c49e66d8462
-
SSDEEP
98304:DLSv4XTNAShZOhCSY9oGKSe/hb0sFjv4rZF:DOv4JBhkhCxohSS3Zvg
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a89494983303eb8bf9fa625220455a9
Files
-
2a89494983303eb8bf9fa625220455a9.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE