Behavioral task
behavioral1
Sample
2cd57671f9eda4a35467e762bba00ce0.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2cd57671f9eda4a35467e762bba00ce0.exe
Resource
win10v2004-20231215-en
General
-
Target
2cd57671f9eda4a35467e762bba00ce0
-
Size
12KB
-
MD5
2cd57671f9eda4a35467e762bba00ce0
-
SHA1
7b7c44034a363f65bba8d3ce666d078c9b37d2b7
-
SHA256
e28b9e9c4de2059b675e4ceed1a00cf9851d74221bbefa9d1e1c3850ff6e7aa8
-
SHA512
aac30816949bfc2b3fd5cb9bb74ff8e20961e85f1562b18bc3f5937a6e3386d080ba72e7a5b6510fe4ee00c340b209fe0996a84d5bccc7bfaccdbd087b2c203e
-
SSDEEP
192:wN/KQse9hPPIKloLDJ+odlWOkC1TgJJZdA1VYE86wkF6RR1R5Bz7NHMyj:wNqe9hPPIKlY8of1aOVHwkERR1RLz75
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2cd57671f9eda4a35467e762bba00ce0
Files
-
2cd57671f9eda4a35467e762bba00ce0.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 144KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 38KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE