Behavioral task
behavioral1
Sample
2c29704aa89b663e223e2c77b56b07f6.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2c29704aa89b663e223e2c77b56b07f6.exe
Resource
win10v2004-20231215-en
General
-
Target
2c29704aa89b663e223e2c77b56b07f6
-
Size
282KB
-
MD5
2c29704aa89b663e223e2c77b56b07f6
-
SHA1
5b9052071637441dc64ba45c7b01dac08e9853db
-
SHA256
eadb59cf66a4a2a1f274115efaa502d646a39aefc9c4de5f24a9b2657458ef87
-
SHA512
fe00c06e9d80a785b5286ba6fce56211fbc4cf8820c330e5aa9dcbd37fb6fc36138a03f5aaa7ba481eb869fdd45b46e8efd2516956c30a0da187312847f1ca37
-
SSDEEP
6144:hGSIap/63sYg7YKdkFKKegwGjeEDC1uPVfEEZiBO3:hhy8BcPb3C1OEEcO3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c29704aa89b663e223e2c77b56b07f6
Files
-
2c29704aa89b663e223e2c77b56b07f6.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE