Behavioral task
behavioral1
Sample
2b65926ae1921b4f20053139730e8887.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2b65926ae1921b4f20053139730e8887.exe
Resource
win10v2004-20231215-en
General
-
Target
2b65926ae1921b4f20053139730e8887
-
Size
133KB
-
MD5
2b65926ae1921b4f20053139730e8887
-
SHA1
65044d2ec9cc841d260b1c69f6f0d16f0ea4263d
-
SHA256
2e0b4557bb22683d84400bac4063f6f004a6e3cc2f1a5dc4696dc490f6aed2d7
-
SHA512
7a5f3d95ae7de7160fe03aabdbd94118c3ddffa4ce0a9da3b474b56da5d9914b8a3a30ae1ea66c020e42aeb12bb8f3ab34a4783cdc955984c696a76b72bede04
-
SSDEEP
3072:UmEzy0v5NTI1oSGT5b+2ycGTuAoMlQPCUm6lB3EuGj856+kcQ:JEzyk5u1oSuK2MTaMloCH6lB0fpPcQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b65926ae1921b4f20053139730e8887
Files
-
2b65926ae1921b4f20053139730e8887.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE