Behavioral task
behavioral1
Sample
2b724e21c4302a8d80dc8fdfc97f8684.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2b724e21c4302a8d80dc8fdfc97f8684.exe
Resource
win10v2004-20231222-en
General
-
Target
2b724e21c4302a8d80dc8fdfc97f8684
-
Size
1.0MB
-
MD5
2b724e21c4302a8d80dc8fdfc97f8684
-
SHA1
70ecd1dc3960aa018468f87da1be0b64a46d05aa
-
SHA256
49e3a5c92c111ef52029199a570e012585eb4f1937a8e0f84da0ed66566f4a0c
-
SHA512
1ac8fada062feee30251aa1d4bcd11a9c19eb6084d3046f3793b784dbb5c7865adbf95ebe95197ef4d7c4b8cbd26fbbbc9bd82f402be8b80e411eec6408a7328
-
SSDEEP
24576:ha0szSgcFRt5pmh+9T4qLvYjeJQLqYGhepM/8HfGx3Rp:hfgcHtrmhqT4qDYjeJFYeD8H+3Rp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b724e21c4302a8d80dc8fdfc97f8684
Files
-
2b724e21c4302a8d80dc8fdfc97f8684.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE