Behavioral task
behavioral1
Sample
2bc020a7dec3247c9bd5c5edb767ec36.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2bc020a7dec3247c9bd5c5edb767ec36.exe
Resource
win10v2004-20231215-en
General
-
Target
2bc020a7dec3247c9bd5c5edb767ec36
-
Size
10.6MB
-
MD5
2bc020a7dec3247c9bd5c5edb767ec36
-
SHA1
ebeb092fcd9e5f239dccd785e549c5b530f843b6
-
SHA256
581d21d9b9f2bbe7107b80f2e12e50493e16eec52fa0b09d881c2ef1ff71c202
-
SHA512
df528e126b21437200b8eec0c2d0df860761febae348006261b101fe7256f4cf9dc02c2319eebfc08d08d9cf76af89a27e0211cc31b55c71de933c6e0f626589
-
SSDEEP
196608:69rQ2MqfUzJdzz1T4HyhvHzBEvcu5+zJdzz1T4HyhvHwAN4uzJdzz1T4HyhvHzBx:69lunz10Sfocqonz10S6Q4Ynz10SfocH
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2bc020a7dec3247c9bd5c5edb767ec36
Files
-
2bc020a7dec3247c9bd5c5edb767ec36.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 141KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE