Behavioral task
behavioral1
Sample
2663a94e0120c59d20c6efb70bb500c5.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2663a94e0120c59d20c6efb70bb500c5.exe
Resource
win10v2004-20231215-en
General
-
Target
2663a94e0120c59d20c6efb70bb500c5
-
Size
1.5MB
-
MD5
2663a94e0120c59d20c6efb70bb500c5
-
SHA1
13b644bef4f494b7f193ef44bdf0bf11cec1a8da
-
SHA256
286a46bb302119f49bf47d721b2d2b4795415a980fdede00d018730aa3496e8f
-
SHA512
0f4c1d988fc0676df554cb57a789ea0b5e5f3b8593fa378d2d1000666b06bdadedd25e4d4946292ecc9f06c70d6878b325704122b971983a7b363bc3d3406b56
-
SSDEEP
24576:NpqDKGghpFiahc7MWUGXtipn+nt0rVTDm80eOiU8ilArVGj3W:NgDK7pgHMWUGXtiZ+nepXwJizKVj3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2663a94e0120c59d20c6efb70bb500c5
Files
-
2663a94e0120c59d20c6efb70bb500c5.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE