Behavioral task
behavioral1
Sample
2debf9d34765e93b5cdfea162a1df7fb.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2debf9d34765e93b5cdfea162a1df7fb.exe
Resource
win10v2004-20231215-en
General
-
Target
2debf9d34765e93b5cdfea162a1df7fb
-
Size
5KB
-
MD5
2debf9d34765e93b5cdfea162a1df7fb
-
SHA1
8d5863dc7fe0e8eee014af8172556433a326c05d
-
SHA256
dcf6fa0a005b4b4ce01d09233c5378644a041e679bf39135e8ec2ec2c3fc326f
-
SHA512
0471a96572f0bd2c840fdc8e4cb7e29d3e0dbefccb83547282c2591c933522fd1d763680530024036724e8cb830b119adcdc7b5f3a361b2e6eb1a68f780c087a
-
SSDEEP
96:86zsDgQfGBxBv4DNYZtrjTfJ/Pul+d5DUtPRnUXtWmjrDHcJmGqkMCDRJ:3sDg2GBxd4xYLjR/e+TDcnUXtW48x3DT
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2debf9d34765e93b5cdfea162a1df7fb
Files
-
2debf9d34765e93b5cdfea162a1df7fb.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE