Behavioral task
behavioral1
Sample
2319c12da6e49cfaaec2a0976bcd183b.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2319c12da6e49cfaaec2a0976bcd183b.exe
Resource
win10v2004-20231215-en
General
-
Target
2319c12da6e49cfaaec2a0976bcd183b
-
Size
1.9MB
-
MD5
2319c12da6e49cfaaec2a0976bcd183b
-
SHA1
c882b0c56b8c2ca3a0417f3ed74923d31c3ed107
-
SHA256
5237dead2395e70040b091c26cc913fc98c44518171233fba3159ffb9da9b427
-
SHA512
f60f3f3238768e75f64e12737b147fd882625de2ce6730b960b906b608b1858e17623e18c02e9522c5dc0e74e0d1f63aad2af04751009ea9588d5d76b39d1920
-
SSDEEP
49152:h3tZ24/waoCZ9DDPOIrvEZ4zQETntBNm0fk354AfKE:Z2va7DPOIgqz9Tnrc0fkp4AP
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2319c12da6e49cfaaec2a0976bcd183b
Files
-
2319c12da6e49cfaaec2a0976bcd183b.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE