Behavioral task
behavioral1
Sample
2af6400c6b80df990c8b16b9e541d83b.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2af6400c6b80df990c8b16b9e541d83b.exe
Resource
win10v2004-20231222-en
General
-
Target
2af6400c6b80df990c8b16b9e541d83b
-
Size
1003KB
-
MD5
2af6400c6b80df990c8b16b9e541d83b
-
SHA1
3bb07d1cffd6ade1734b2c80194d527d840c6ed3
-
SHA256
5ce60df519d91d4e54fefb6d604aee7d542396e3f42c03bd9ad100059823ec80
-
SHA512
76769f251dc315dd1b6c6303885dfea37212647be64837c4f4e102a6d341a0ce6147988d9a8e5ff99fef6ff401c618ef5a3d9fe7e74b8be1ed46e4cc72775131
-
SSDEEP
12288:BTbdmglx+fDRwTOWBFsWpf0W0YZvBeB3fLEUpLHkEAyj5OS6tpne5a1IRgviR1Hc:BAWXTOWXHxZvBGvLEUPHke5gEgKjwnS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2af6400c6b80df990c8b16b9e541d83b
Files
-
2af6400c6b80df990c8b16b9e541d83b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE