Behavioral task
behavioral1
Sample
2da89266666c186aa4c7c63925f877c5.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2da89266666c186aa4c7c63925f877c5.exe
Resource
win10v2004-20231222-en
General
-
Target
2da89266666c186aa4c7c63925f877c5
-
Size
1.8MB
-
MD5
2da89266666c186aa4c7c63925f877c5
-
SHA1
d6254c325bd62e359e0ca413f22cee4003801cfb
-
SHA256
0d7fe6dc5ff944be0ec0553f04a22ad2385ebc26dba6e7ccd323f460f30cb8bb
-
SHA512
4eea8826ec669ee315c6584515c7df5113aa0c774a09bf93591568495dba825f73605de65cfffb07393adb5fcb733c3f2f2f8f7c88e50a476b8d3032d3f4b70f
-
SSDEEP
24576:S6pQPxQ2JyP2r5mJV91xM7RpbwgIvs7NxqUkH2:SCqm2Jpr0nNM7Dus7Nx2W
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2da89266666c186aa4c7c63925f877c5
Files
-
2da89266666c186aa4c7c63925f877c5.exe windows:4 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 616KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE