Behavioral task
behavioral1
Sample
2bd1e3764eb63255e243396af605114b.exe
Resource
win7-20231201-en
Behavioral task
behavioral2
Sample
2bd1e3764eb63255e243396af605114b.exe
Resource
win10v2004-20231215-en
General
-
Target
2bd1e3764eb63255e243396af605114b
-
Size
99KB
-
MD5
2bd1e3764eb63255e243396af605114b
-
SHA1
a81f7426287b8a42b7ccd609352600e95ebb5d41
-
SHA256
ce2d08a9e9f4bfb3b58adef29e57bdbb2d30bf265996494a1946684e97301d05
-
SHA512
8b1da426b9df898d848882a5019f95766e0fa0330c2294af088a529ea3b16d24f0f599a919d222cc078e972212d0e398fcf000e0f4172dfe0307a2ad5e368429
-
SSDEEP
1536:fPx+riFFG1O9/m3wEYQqjh+rmKVsMiVPzk0E:lYmFEgjwqWsMMLY
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2bd1e3764eb63255e243396af605114b
Files
-
2bd1e3764eb63255e243396af605114b.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 41KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE