Behavioral task
behavioral1
Sample
2c290e9cbaaa964b7545f49d3de1b9f1.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2c290e9cbaaa964b7545f49d3de1b9f1.exe
Resource
win10v2004-20231215-en
General
-
Target
2c290e9cbaaa964b7545f49d3de1b9f1
-
Size
2.6MB
-
MD5
2c290e9cbaaa964b7545f49d3de1b9f1
-
SHA1
a9b36d144e10fef9e212ea94bda9d7ead9699378
-
SHA256
2b5c552ec31d5699956476b09f5c0cb1744a949d2ebc9c0977760e22ddd38ba1
-
SHA512
e4ab2f1b5f6878f29fc98409b432a336975fc481f97c0bef3b7c6e472cd23b8992a22e52b175159d90e9d40e95684493c541710574f159fd6db5a608d9ec3a7a
-
SSDEEP
49152:XDA/sVMVoi4ti4n3Kz7BVaw6JrDM73x9Tay3:TjVMl4tin3awMuPr3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c290e9cbaaa964b7545f49d3de1b9f1
Files
-
2c290e9cbaaa964b7545f49d3de1b9f1.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE