Behavioral task
behavioral1
Sample
2b0072e9ce3492c4d14ad7278b328082.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2b0072e9ce3492c4d14ad7278b328082.exe
Resource
win10v2004-20231222-en
General
-
Target
2b0072e9ce3492c4d14ad7278b328082
-
Size
20KB
-
MD5
2b0072e9ce3492c4d14ad7278b328082
-
SHA1
de4637c68377360423709baa67a7547ce4665411
-
SHA256
f0c68ab745b585e432572d53f91fad85ee8ae7ae7df1822110ef4f528a75ac14
-
SHA512
62de5a3cfa9b5e6b35dee9bf1af35f397c8eedfba4adad6274022b1f6f295361f1e2bd76793f43c4ce450e00c9c403672a03c8525e4191ea57ac838f0c05392d
-
SSDEEP
384:LfJig+J3b80zo1pnLs/xiXlAaFqlJwKE53wYSmHp2fPHs6QKjjlU:cweo1G/sAagY7HpKsLqj+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b0072e9ce3492c4d14ad7278b328082
Files
-
2b0072e9ce3492c4d14ad7278b328082.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 187KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE