Behavioral task
behavioral1
Sample
2dde66d285412a19e7b8cea7f47874f4.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2dde66d285412a19e7b8cea7f47874f4.exe
Resource
win10v2004-20231215-en
General
-
Target
2dde66d285412a19e7b8cea7f47874f4
-
Size
110KB
-
MD5
2dde66d285412a19e7b8cea7f47874f4
-
SHA1
691c5e88a12d51acaf80ddad5c3af2cd8fa2e272
-
SHA256
c61e0f70457ea5cdcac1727fe0c7a69e300e70bddfd9677ea5b3b3a1d6764e0b
-
SHA512
433c7c9b09151eb1a800c4c02ae58418d3ac8980f88d75648aa2d27cf89fa3b2a1dfb3ae19ec7b443b28b5527c38996d2f2fbf7957a7fbe60f4b73071370ae0a
-
SSDEEP
3072:Kn/C0W+GeQYLBJo4+k5GDzSoVLJhKfW68xiq6S1S+Ru:Kn/C0W+GvZzSo3Etit6V+8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2dde66d285412a19e7b8cea7f47874f4
Files
-
2dde66d285412a19e7b8cea7f47874f4.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 452KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 102KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 6KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE