Behavioral task
behavioral1
Sample
2cd5d33c04c5e317196851672d75f411.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2cd5d33c04c5e317196851672d75f411.exe
Resource
win10v2004-20231215-en
General
-
Target
2cd5d33c04c5e317196851672d75f411
-
Size
99KB
-
MD5
2cd5d33c04c5e317196851672d75f411
-
SHA1
3a429a5f21a39c1e1fd960ad02e7a62c5fa4c187
-
SHA256
6e26fe22c7f74a2e3d6c5c4611ada531f3a1a3104b5100f0eb6b49f94f6f87e7
-
SHA512
e19e0fda406acaa3d7faaf38c148e5d297dba18470a96b635cff787292bd4d8946f459a58b339caf7feb81dd6da809ef6a8604f2c6ed0e7ff420190f2433b82f
-
SSDEEP
3072:v4kVwgdUD1Ozq7CWk5SfTuGQvywHjV4SGuIcMfcnnL:wkCeUhO9SfqGQvywDV4SpIJf4L
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2cd5d33c04c5e317196851672d75f411
Files
-
2cd5d33c04c5e317196851672d75f411.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 348KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 197KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE