Behavioral task
behavioral1
Sample
2e1ae5dc82fa62b632ffb04630c3114b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2e1ae5dc82fa62b632ffb04630c3114b.exe
Resource
win10v2004-20231215-en
General
-
Target
2e1ae5dc82fa62b632ffb04630c3114b
-
Size
4.2MB
-
MD5
2e1ae5dc82fa62b632ffb04630c3114b
-
SHA1
829cca21ea6ea3b4a0835f57c32d20262f821e34
-
SHA256
e86a5b9b55b8a1693d75716394ae2a321acbe2fa34c04e2edce1349131d8718d
-
SHA512
121e26026cc6e6ba6e8226a12cf906216ba46fa676943ac6f0b61c0c36ff5cf36d44c6483fa5f1d23674adcb70478a11fdadde123396153aaa2dfaa8a49b93e3
-
SSDEEP
98304:DmU2krzljpw29jb32NIwDj4H1Q/hUGA1A4:Fd/N1SrGTS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e1ae5dc82fa62b632ffb04630c3114b
Files
-
2e1ae5dc82fa62b632ffb04630c3114b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE