Behavioral task
behavioral1
Sample
2cfc6c858722ce5203b0178607e545ad.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2cfc6c858722ce5203b0178607e545ad.exe
Resource
win10v2004-20231215-en
General
-
Target
2cfc6c858722ce5203b0178607e545ad
-
Size
11.0MB
-
MD5
2cfc6c858722ce5203b0178607e545ad
-
SHA1
5f14a6e8390ac6d63485a24f7a05f8d66c5ef4dd
-
SHA256
30023c519b0d5648c81376e93346078281e5b82a74bfbec32077f5e80263491a
-
SHA512
6e7f675adccaa848b3533ddd5b9d4ff1a7b5333d93e61af5ec4642adb7722ff5a8986a46e85eeffe8c704640727d88b3f150d5f282e8c58c9c9846f2e2765561
-
SSDEEP
98304:A+z1Y2dWV+V4A35mCckFR+vicS43EG/Y3hiRClFKU35mCckFR+vicS43:BZYY4Y33FR+6c8G/DAKU33FR+6c
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2cfc6c858722ce5203b0178607e545ad
Files
-
2cfc6c858722ce5203b0178607e545ad.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE