Behavioral task
behavioral1
Sample
2a4f8cbad6b9de297281a36c1d3df136.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2a4f8cbad6b9de297281a36c1d3df136.exe
Resource
win10v2004-20231215-en
General
-
Target
2a4f8cbad6b9de297281a36c1d3df136
-
Size
31KB
-
MD5
2a4f8cbad6b9de297281a36c1d3df136
-
SHA1
61b24a19a379085ab38af2f89b3fd523d348856a
-
SHA256
8e960b3d709de9e17b5aea1eff191d12ec33bb530b41551112697e1fe5e70be3
-
SHA512
928da61256bfa48a179a7d17d3150051e5713cf2c52cd896381924f12c170672e8679567b1143273a4557cd7e66f03a4f3390bcaae15d289bb36bd59e094e1f0
-
SSDEEP
768:yRDCalFeEwrD8Pct5Rg1Q39im08qhwc6L+x1faGCARsH+z:TGFbet5RL21a/ARsHA
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a4f8cbad6b9de297281a36c1d3df136
Files
-
2a4f8cbad6b9de297281a36c1d3df136.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 18KB - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 222B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dswlab Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE