Behavioral task
behavioral1
Sample
2b68a34acfc194897f65e24c697c82f7.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2b68a34acfc194897f65e24c697c82f7.exe
Resource
win10v2004-20231215-en
General
-
Target
2b68a34acfc194897f65e24c697c82f7
-
Size
1003KB
-
MD5
2b68a34acfc194897f65e24c697c82f7
-
SHA1
5d95349e13137b79ae5e628364d6e8575a2aa7a0
-
SHA256
cf0f5070e81aae873d2e68f0a8ffa633c619a9b7dd0b18535858983f701b541a
-
SHA512
56ea0c6e79a0778607e0ba3b362ed2deeeb6f9123cdf8d20d5d037218eabb1b8a36860f4562b2b4212b31cfccac93ea4506cd8a96215c84e9ba5eb0ee4bfb191
-
SSDEEP
24576:65f8o1fOL2i1y7vsbnXD8HcjukL2CDYibq6/yqLNaF:a8o1fOL2ey7vsbnXD8HcakLz0ibq6yqh
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b68a34acfc194897f65e24c697c82f7
Files
-
2b68a34acfc194897f65e24c697c82f7.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE