Behavioral task
behavioral1
Sample
2f1923998288f25dbaff9e287726a07b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2f1923998288f25dbaff9e287726a07b.exe
Resource
win10v2004-20231215-en
General
-
Target
2f1923998288f25dbaff9e287726a07b
-
Size
187KB
-
MD5
2f1923998288f25dbaff9e287726a07b
-
SHA1
304f092077edfb472e2b49f28b8f69805b5f3e6e
-
SHA256
e78ea8eebc1b0c0f7cc0cbad86da43819356d1b1348e768e33cca306fb618e50
-
SHA512
5cc3141687f35520b6e06414f926d5289b93f40eeaa5950b83f9cb886eef342e83ca9e7d13ca8069e9dcf2d106654f4b349ce50ce2a7b36bf982a6529a4e2070
-
SSDEEP
3072:7oejbkwUIVmQxqvvjXNHFzgm9hwNaZDecrlkDEVCh5bIO4j9X2a5mhbDcMDbRaWb:3BQq4DNlkm/wI6l1IbH5GPcMPRhya
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f1923998288f25dbaff9e287726a07b
Files
-
2f1923998288f25dbaff9e287726a07b.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 832KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 380KB - Virtual size: 380KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE