Behavioral task
behavioral1
Sample
2b55e5986acffd8da31d74a67936be7e.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2b55e5986acffd8da31d74a67936be7e.exe
Resource
win10v2004-20231215-en
General
-
Target
2b55e5986acffd8da31d74a67936be7e
-
Size
20KB
-
MD5
2b55e5986acffd8da31d74a67936be7e
-
SHA1
2dd2a9fdb2321c9d2ac3213b6201a7a31819bd33
-
SHA256
5b9bc6467df12572d410266aa4e9505b1d9b37d15f68a8f1c8f1a654da1bcc61
-
SHA512
09b662fc28b05802b8460f6a687ee88f52fff1c16ee5c1fb55e23b0e08f1e95dd32041f1ce000d1df8a02f6ecca6b657efaafcc54cfcef23f66a119deb93bc17
-
SSDEEP
384:EnYqDBnNhQvZJWe4z/umuONz9AkbSEb9ZRNWBq/G1aO5xzjW/ikQfz:5Ih9zWmuOfnBDRNWI/JOnzjNl
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b55e5986acffd8da31d74a67936be7e
Files
-
2b55e5986acffd8da31d74a67936be7e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 256KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE