Behavioral task
behavioral1
Sample
2914aeefd67372ba052af3789cf83c72.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2914aeefd67372ba052af3789cf83c72.exe
Resource
win10v2004-20231222-en
General
-
Target
2914aeefd67372ba052af3789cf83c72
-
Size
149KB
-
MD5
2914aeefd67372ba052af3789cf83c72
-
SHA1
6430591859d6e431a2cfb0c99e7fb108e3770039
-
SHA256
b948ec6ef52dfad1e17058d9817c90867898a202f8ff8267b5dcd1cb92ea47bc
-
SHA512
58eeb02952ed489e6007fe9f0f2efd69486311932d3ffa67b792ec4a39650c8cc6e4e434cd47ec89d367a34fa42a2cd7453967ec8313cafb3272bebcceffb5f5
-
SSDEEP
3072:8Ktivv9buoU3kbOskvRFeHsZdx12dd/iJpIC:6Nuo0kb8vB2T/4
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2914aeefd67372ba052af3789cf83c72
Files
-
2914aeefd67372ba052af3789cf83c72.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 84KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE