Behavioral task
behavioral1
Sample
2736c01faa4bc4d22b63396256f14f6c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2736c01faa4bc4d22b63396256f14f6c.exe
Resource
win10v2004-20231215-en
General
-
Target
2736c01faa4bc4d22b63396256f14f6c
-
Size
49KB
-
MD5
2736c01faa4bc4d22b63396256f14f6c
-
SHA1
4a7f4486089262b5a21e6587c6b7d82a768a9b1e
-
SHA256
15797e32845e53bded2465718ab0086475b11e85b3b38cd3d251d5a2072767f1
-
SHA512
ec1cf12550f0a3a31b54e1d8b9b6dcfe57308150ea856966c11d4e7cfb1ba946905012709e2632f365dafabcfbb1dc19117e34d7900fa065062334372a1ed04e
-
SSDEEP
768:+pLKrFQIk2no2ayPNotjvOOvzeTbTlRR8HZs/9t106+MKED9rkeK5:+pEZk2BqbOOre/gs/8G9rkeK5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2736c01faa4bc4d22b63396256f14f6c
Files
-
2736c01faa4bc4d22b63396256f14f6c.exe windows:4 windows x86 arch:x86
e27d2e860b3f8e2a0fcc19aadb2f0a4f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
GetSystemTimeAsFileTime
Sections
.y0da Size: 512B - Virtual size: 87KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.UPX1 Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pepack Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE