Behavioral task
behavioral1
Sample
2bf7c4bd940228d7907873ae77f4020d.exe
Resource
win7-20231215-en
General
-
Target
2bf7c4bd940228d7907873ae77f4020d
-
Size
784KB
-
MD5
2bf7c4bd940228d7907873ae77f4020d
-
SHA1
960d77037810f7805e8ef7b972dad9205f1d080c
-
SHA256
3e9b9bc144ca29ff353dfe54597b8f2d2a7b6ee6e235acbfa08716886ed0c473
-
SHA512
997401664e473cc698d0d0c3d0b6a93db28e45401de097271efe3c594303f12ec50c7bd70297daf0ecaeb0c89da7c7c743e50f272de3076b121f263958a1e83c
-
SSDEEP
12288:b23114gSSV6HZxkfgiXLEFKoT/oIvBpFj0CfpTRcSRfbuMbV:a31Ch46HZcFLMRoIT1nxTmAuMbV
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2bf7c4bd940228d7907873ae77f4020d
Files
-
2bf7c4bd940228d7907873ae77f4020d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE