Behavioral task
behavioral1
Sample
2108c7d8f6ff1bbd59d05b6bfc5f6d0e.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2108c7d8f6ff1bbd59d05b6bfc5f6d0e.exe
Resource
win10v2004-20231215-en
General
-
Target
2108c7d8f6ff1bbd59d05b6bfc5f6d0e
-
Size
269KB
-
MD5
2108c7d8f6ff1bbd59d05b6bfc5f6d0e
-
SHA1
73dcf31dddc9329d28fc93d2e1ba7da5db5b7595
-
SHA256
e72697ec2ec22e4d8dd8000a8dad2af40a690f0c84dd568af18df0dc065bf03f
-
SHA512
38b6b7e5bb8ee6742938aa11e487ba0f45e68d7a720b336ca364b8fe56c623e9cce6093182bfc07b6eeb79a7e91444dbaa6892cddcef2b136bcf458b2593efd7
-
SSDEEP
6144:XdI2gTKuqLdM15NubJdDIi/zuKDqRNywuxbTkVF:NI2tLdMDs3veswGmF
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2108c7d8f6ff1bbd59d05b6bfc5f6d0e
Files
-
2108c7d8f6ff1bbd59d05b6bfc5f6d0e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 392KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 375KB - Virtual size: 376KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE