Behavioral task
behavioral1
Sample
2544e03206f8f30673ab74582064d2a2.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2544e03206f8f30673ab74582064d2a2.exe
Resource
win10v2004-20231222-en
General
-
Target
2544e03206f8f30673ab74582064d2a2
-
Size
3.9MB
-
MD5
2544e03206f8f30673ab74582064d2a2
-
SHA1
fd74c2e2c18ba6e5fb1afb83e01b69a74eb3b707
-
SHA256
88acd1b36c2e2a8a97944b73076cab5ae8eff87d05fe7e5729a83abe2f5cfedc
-
SHA512
f23ee20b3aeafee77659526995e0b5c55e2dede194bf376b3dda438de79fa4dadd2247dc6592b50ec1e2608ae3efbffc8fcebb69fe28b279edf5abe867eb11c4
-
SSDEEP
98304:ExTkHQ1QCzScakcibiqhFqx/7FBwbYcakcibiqhPQwmuq3cakcibiqhFqx/7FBwt:ITE/dliryxzFGYdlirtQwmuq3dliryxE
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2544e03206f8f30673ab74582064d2a2
Files
-
2544e03206f8f30673ab74582064d2a2.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE