Behavioral task
behavioral1
Sample
2118b6a73a2fb6e727b06e1dde4afa3c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2118b6a73a2fb6e727b06e1dde4afa3c.exe
Resource
win10v2004-20231215-en
General
-
Target
2118b6a73a2fb6e727b06e1dde4afa3c
-
Size
1010KB
-
MD5
2118b6a73a2fb6e727b06e1dde4afa3c
-
SHA1
28510b8caf02b3b4f8603e6ca5398e6c27a3980e
-
SHA256
1692038d17abbbe6ed33dca443a0f7a93784ddbbe17fd4577bbf2a20c5c96561
-
SHA512
de95a1000d9a349c5dfb2e2df3a96b9f95e319720080dd860b580d7aebd52b314c43e1de621380aa3bdeb0d0e755e0ca100ed0f85f55e70a8a0d4d6990bdf929
-
SSDEEP
12288:9nYwdnrtbFS/gMX7DeHBYTfm6hiYc5plDFwrilMiYTfm:Owdqd7iHBmfduvlB7lbmf
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2118b6a73a2fb6e727b06e1dde4afa3c
Files
-
2118b6a73a2fb6e727b06e1dde4afa3c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 604KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 201KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 152KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE