Behavioral task
behavioral1
Sample
2b33e8fcd58807b80e628ae1eeb9d642.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2b33e8fcd58807b80e628ae1eeb9d642.exe
Resource
win10v2004-20231215-en
General
-
Target
2b33e8fcd58807b80e628ae1eeb9d642
-
Size
59KB
-
MD5
2b33e8fcd58807b80e628ae1eeb9d642
-
SHA1
5ab42a2c7084d10fb3555aa63a5c33deea08ea12
-
SHA256
ccbd64d871e2a49b59f7aa898cbbf2a1be43218738d48148c3b9b73ed44400c7
-
SHA512
eab31c62e9723e9eccbb070e11bfcb393886704783a43c551d9c9e44975bf7cbb8f81052bb220736d7951636c63291d9be7a52646c6a9cc6b5f3b7ae48d1e330
-
SSDEEP
1536:c2grQ/lOOQ5JI6a2WJ0Y+0RVcdZPBjW5PYFZN:TgrQ9OOQ5JI6aN7fVgPwR
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b33e8fcd58807b80e628ae1eeb9d642
Files
-
2b33e8fcd58807b80e628ae1eeb9d642.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 176KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 58KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE