Behavioral task
behavioral1
Sample
2900a61eb29a80a368fbb6930396212d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2900a61eb29a80a368fbb6930396212d.exe
Resource
win10v2004-20231215-en
General
-
Target
2900a61eb29a80a368fbb6930396212d
-
Size
341KB
-
MD5
2900a61eb29a80a368fbb6930396212d
-
SHA1
fedcb5ab469a93328f3cede81119308686ca35b5
-
SHA256
f9474d7e4bb0cb581aab83d0003f3334520d2b55f9e6185a5cfd9b0972c8c815
-
SHA512
63f11365544b5425cae2c5eb1ffbf3e7bb35bf159c120b419a0ccad1de4cd6777b962ce3cef43a80343e6d437de1f731012f4b8107ff0ee70cdc9abedc389bcc
-
SSDEEP
6144:hGFY/6JkMZqf9V7Yo6LHruTDdRvoZplfiF7AlWFSsyS5306OVjyQ6ss:h5WZqf9hQHreYpJi5wWVyS5k5yQJs
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2900a61eb29a80a368fbb6930396212d
Files
-
2900a61eb29a80a368fbb6930396212d.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE