Behavioral task
behavioral1
Sample
2da60ba298b4802c6ffd79a3eab085fc.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2da60ba298b4802c6ffd79a3eab085fc.exe
Resource
win10v2004-20231215-en
General
-
Target
2da60ba298b4802c6ffd79a3eab085fc
-
Size
277KB
-
MD5
2da60ba298b4802c6ffd79a3eab085fc
-
SHA1
c34df92dceaf202573288d9c8915bad40e0bbd41
-
SHA256
7de092106c1a62fadb3504a293b7e7be9e6a77df03ece48a9179e75ce57bc983
-
SHA512
0da7b47633442dc4e332fe6e0e000e0f5cf13cbab5b102ad74ad11b6edc80105b5b644b62047e3e2c828a292e4ea4b4d1cd11c2ade9aea7bc57a88178197f208
-
SSDEEP
6144:RQqg5E6pGV/W7frufxMOjfqgXQkeVtua6e8kJi48er:GF9GBW7zaxMuqggkeVtuZha8G
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2da60ba298b4802c6ffd79a3eab085fc
Files
-
2da60ba298b4802c6ffd79a3eab085fc.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 242KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE