Behavioral task
behavioral1
Sample
2489c49c858925cc72a2a77a2a2a112e.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2489c49c858925cc72a2a77a2a2a112e.exe
Resource
win10v2004-20231215-en
General
-
Target
2489c49c858925cc72a2a77a2a2a112e
-
Size
87KB
-
MD5
2489c49c858925cc72a2a77a2a2a112e
-
SHA1
249b196d4cb00427c771378b52bd79e056c4f98f
-
SHA256
4ad4ec32530d72555277de6d497cdc43c3153848d1e79f669d2364f2d0a7751e
-
SHA512
22294a75147ddf8966103bb841aea0a1d42bd23650140619b3e93521f12322607f050869363b7de6e0cd9a047b92e035609fbf1e6ab1e86d93e3ec22b0e3c20f
-
SSDEEP
1536:ArHCGTWTy7NLUx3u6sepZjCNH7nVEQmDjl3TTLfbieUena4oUP4j5+7tyn:8iwpUx3QeypnnQJTjTUj414T
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2489c49c858925cc72a2a77a2a2a112e
Files
-
2489c49c858925cc72a2a77a2a2a112e.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 83KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE