Behavioral task
behavioral1
Sample
f2de1c37b3d6daf204c41ba089dd01cc.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
f2de1c37b3d6daf204c41ba089dd01cc.exe
Resource
win10v2004-20231215-en
General
-
Target
f2de1c37b3d6daf204c41ba089dd01cc
-
Size
2.9MB
-
MD5
f2de1c37b3d6daf204c41ba089dd01cc
-
SHA1
f1009ced0f1e42e025b9303318a5aa1b572f6276
-
SHA256
274be4351b44a31c0d4e79edf4cfa544ef2e7c43343685e46e73a6928f848223
-
SHA512
3f1e581dd8536864e8c178378b76bdb8829f861c71108c01880b73a138be92105da39020b4e96f69617dcf5676dd44f3ce25e8bd52a8cbb049e48d020a3b290a
-
SSDEEP
49152:Qi2+lzQ3qWF+pXbjovz2clmI4MaaGlhfP4M338dB2IBlGuuDVUsdxxjeQZwxPYRr:C1wX0z2clUlNgg3gnl/IVUs1jePs
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f2de1c37b3d6daf204c41ba089dd01cc
Files
-
f2de1c37b3d6daf204c41ba089dd01cc.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE