Behavioral task
behavioral1
Sample
2398776f6b2aa6c23e251352eeeaa20a.exe
Resource
win7-20231201-en
Behavioral task
behavioral2
Sample
2398776f6b2aa6c23e251352eeeaa20a.exe
Resource
win10v2004-20231201-en
General
-
Target
2398776f6b2aa6c23e251352eeeaa20a
-
Size
7.8MB
-
MD5
2398776f6b2aa6c23e251352eeeaa20a
-
SHA1
d72f59e655b137d819f797aae2357fb93e798fcc
-
SHA256
b26be39da70c537ae6b4c21cf654c899a7f87d430074365f8f871756ac56942c
-
SHA512
5c48f068f3939ceab5bd5eab475582201d52c446a02a7f06f432f132b59ef112e044920578b33bd1a4a223cccb0512faa9ade84d9ecc5b20383443e61e7af808
-
SSDEEP
196608:XOAR4d1YR4dG3bR4d1YR4dk+R4d1YR4dG3bR4d1YR4d:XOAR4cR4AR4cR4XR4cR4AR4cR4
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2398776f6b2aa6c23e251352eeeaa20a
Files
-
2398776f6b2aa6c23e251352eeeaa20a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE