Behavioral task
behavioral1
Sample
2a5e4415f910bd79d63054824cc64f90.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2a5e4415f910bd79d63054824cc64f90.exe
Resource
win10v2004-20231215-en
General
-
Target
2a5e4415f910bd79d63054824cc64f90
-
Size
1.4MB
-
MD5
2a5e4415f910bd79d63054824cc64f90
-
SHA1
5d43e33dca3d3ceea6ed55792e2c963a084bfdb5
-
SHA256
0e379b9d5d1da1eb9d70c3cd01fb531df366c38ccd9fcd9a6d52eccc474d8899
-
SHA512
74a944cbd7d1c4272b0db768767d03c8c719c6d6230742d69c4323ad8953c3ee6d7657dc4be7d180ea1dca418dc37edb8f7ebe817441f82719ab2d1565d96235
-
SSDEEP
24576:8kwkqvjLKWITthPwhRKAlO2M8AKV57mm60OUMum/Tsu1YjpHW:lqvy9ZlwhfOqvm7K+AuejpH
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a5e4415f910bd79d63054824cc64f90
Files
-
2a5e4415f910bd79d63054824cc64f90.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE