Behavioral task
behavioral1
Sample
2769f728c245b1afce135d31c719f9d6.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2769f728c245b1afce135d31c719f9d6.exe
Resource
win10v2004-20231215-en
General
-
Target
2769f728c245b1afce135d31c719f9d6
-
Size
496KB
-
MD5
2769f728c245b1afce135d31c719f9d6
-
SHA1
92823665a0d4e9e92eae52f232bd4ed828b63b47
-
SHA256
3e06a5b01e3cc220bb1579c42260528bc911852019c74c98d676dc0b7f79b1aa
-
SHA512
5b6db9e6cdaa2743a4a8d94666f422c6beb75f2a06ef85a271b6f40b7f56f7b933811d96fb36ead8955b29eebf13ed8a9a8f6eb19b234199e114e3dda8b5e145
-
SSDEEP
12288:ERQ1yn4WLPYqnp/7HTaNImSdA+6fVrTJhA0FyQ:7G4WrYE7za5S6+m8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2769f728c245b1afce135d31c719f9d6
Files
-
2769f728c245b1afce135d31c719f9d6.exe windows:4 windows x86 arch:x86
5f2df7257758bf2707e2911007001ebd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ResetEvent
CreateThread
LoadLibraryA
FindResourceA
GetModuleHandleA
LocalAlloc
LocalFree
GetCommandLineW
GlobalAlloc
GlobalFree
SetEvent
CreateProcessA
ExitProcess
GetTickCount
user32
GetClientRect
GetWindowRect
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
ShowWindow
UpdateWindow
CreateWindowExA
LoadBitmapA
SendMessageA
DestroyWindow
Sections
UPX0 Size: - Virtual size: 160KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 67KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 46KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 362KB - Virtual size: 664KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ