Behavioral task
behavioral1
Sample
2d046bfcf0b274f4ad65305662416a0c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2d046bfcf0b274f4ad65305662416a0c.exe
Resource
win10v2004-20231215-en
General
-
Target
2d046bfcf0b274f4ad65305662416a0c
-
Size
339KB
-
MD5
2d046bfcf0b274f4ad65305662416a0c
-
SHA1
be5b46b592269dc2f3d0893f258a44b69424e184
-
SHA256
8dc8d0638a4d5c29e83ec061eb37c859c16642521b6a9511bae8538cc67cebfa
-
SHA512
a57d3165d26cfc4129d63fc47d2fa545dbc131df2f4bee72e7675dff03fbbfc244486215379a1f5a8c976b7056aa511a1ede221aa3a63ecf22a4ba3abf3f0029
-
SSDEEP
6144:wLYXjIyK/oaDFbc+6cTUq+jpyHhof1arQhMfOV0w9pib6sro2tNx6tau:DXjQ/oaF/jTZ+VuSNym8OV0ENEoz
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2d046bfcf0b274f4ad65305662416a0c
Files
-
2d046bfcf0b274f4ad65305662416a0c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 224KB - Virtual size: 224KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE