Behavioral task
behavioral1
Sample
2e33268b3bbdd074dad5c49b615ebf8b.exe
Resource
win7-20231215-en
General
-
Target
2e33268b3bbdd074dad5c49b615ebf8b
-
Size
212KB
-
MD5
2e33268b3bbdd074dad5c49b615ebf8b
-
SHA1
ff0f279bac26c3eb0fc24404b6a5d1497077e2fd
-
SHA256
cfe8ee9d0504fc7192d3feff350a0e9092fcf0b8117a562178955f9bc7e88bd6
-
SHA512
e1ffc7c369415e58bbd2cba4a71382986bbd474a35358535c038a173532a0df5563947f2269e477f5fce411b6b4672a53edc7537d442e91c36d1493fb7c683c4
-
SSDEEP
6144:oJPgv7wJZ87wBjd7mgkZUl30tmSFDpotI:oJPdJS7whdSUtKNn
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e33268b3bbdd074dad5c49b615ebf8b
Files
-
2e33268b3bbdd074dad5c49b615ebf8b.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 416KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 184KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE