Behavioral task
behavioral1
Sample
2ee1369b80802575bebee2eb42100424.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2ee1369b80802575bebee2eb42100424.exe
Resource
win10v2004-20231215-en
General
-
Target
2ee1369b80802575bebee2eb42100424
-
Size
2.6MB
-
MD5
2ee1369b80802575bebee2eb42100424
-
SHA1
82b7f98888409790a04ec406e3b88ca800cd745b
-
SHA256
c810697a3d4486b8713a9e1cb220e8186e4e11c23873c5bc62a11c2b8617db18
-
SHA512
6a8469f6005ed4844446e49b51b06e398b374447b9f693e698f49cc0b9c26882e147a1eb2d6742ba5114e00c2311af527064b4c306b8c2591b2581b77d3de0ce
-
SSDEEP
49152:81G21zGqwKerXuSDjWtRQz3ZXVCSQr/WYutay3:r21ZMR0/uN3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ee1369b80802575bebee2eb42100424
Files
-
2ee1369b80802575bebee2eb42100424.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE