Behavioral task
behavioral1
Sample
2a12249f302f98cb73a4f86f83f0cf63.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2a12249f302f98cb73a4f86f83f0cf63.exe
Resource
win10v2004-20231222-en
General
-
Target
2a12249f302f98cb73a4f86f83f0cf63
-
Size
88KB
-
MD5
2a12249f302f98cb73a4f86f83f0cf63
-
SHA1
c637c412dc900187d4798d9d64fd6903b6cc8723
-
SHA256
3dd58990209be84f1580cbe3d8fb59b03c9b2b16c3887ea6888c9801416f5ba1
-
SHA512
40c21859a06253483a857616f11e0a2c5ea0d9601e9d21a7ff96a885a47d4fe5379536aa26dd7ba2a2ef2d0b86d12b78c22e0afa6ec601174084573ecf51a3d9
-
SSDEEP
1536:M3dotHVs139nouy8WvVtqjhpiDpVWHVD89ZmkVzwFP9ZkPxCWk6QYdb:QedCVoutWdt867WCzmkVzwp9Zkf4U
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a12249f302f98cb73a4f86f83f0cf63
Files
-
2a12249f302f98cb73a4f86f83f0cf63.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 176KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE