Behavioral task
behavioral1
Sample
2b67910cb507409515d2b0bfbab305eb.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2b67910cb507409515d2b0bfbab305eb.exe
Resource
win10v2004-20231222-en
General
-
Target
2b67910cb507409515d2b0bfbab305eb
-
Size
209KB
-
MD5
2b67910cb507409515d2b0bfbab305eb
-
SHA1
9a7081e9abb3a8aac61578d99d4b4b8fe1c8bb1d
-
SHA256
c0c0ebeb5de0779dc404ebabf4a24a45e93ef227f40677fc0a88498c2d45abb7
-
SHA512
2372404c930ff7f831b5cc24d9d20a69175171b40f4d1e17053b40b33b2f3febab77dd73688b2f79d64273ea732f486a2e80bd0adebfec3ba87daf30dc51c187
-
SSDEEP
3072:NDXDM/0m9YWp2ss4ICV34eJ0oVu8N9KYEf5iEu41vxADJuoutOLTqWt:NzA/0m9V2ssq1uouGrYz/uuoScqWt
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b67910cb507409515d2b0bfbab305eb
Files
-
2b67910cb507409515d2b0bfbab305eb.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 356KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 183KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE