Behavioral task
behavioral1
Sample
2689b618bf0e17dbcf93e0aa7ef20655.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2689b618bf0e17dbcf93e0aa7ef20655.exe
Resource
win10v2004-20231215-en
General
-
Target
2689b618bf0e17dbcf93e0aa7ef20655
-
Size
2.9MB
-
MD5
2689b618bf0e17dbcf93e0aa7ef20655
-
SHA1
09c975edded11bb261dec75337fcc7400cae6674
-
SHA256
ec3eead44e5e807fcc81e55514db8dccf6e1f44ad7bf5a7fbae0cb3698594f7b
-
SHA512
83228ccaeb77c0d49813c0c09e7b463ef29cad96acff2e43acf897fc2b9dd420f6b6d5dbeeeaf42ead8eaf3a71ebd8d1e4de81301bc12dd360478f03ab8ab48b
-
SSDEEP
49152:AgQMq9p1qQYC3RdOJ8CNnUJ/o/TuXN74NH5HUyNRcUsCVOzetdZJ:AgQMksQjOJznUNo/TuX4HBUCczzM3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2689b618bf0e17dbcf93e0aa7ef20655
Files
-
2689b618bf0e17dbcf93e0aa7ef20655.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE