Behavioral task
behavioral1
Sample
2c3a93724af4c951c4d5d540b8b6d891.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2c3a93724af4c951c4d5d540b8b6d891.exe
Resource
win10v2004-20231215-en
General
-
Target
2c3a93724af4c951c4d5d540b8b6d891
-
Size
5.1MB
-
MD5
2c3a93724af4c951c4d5d540b8b6d891
-
SHA1
8adccabfad7f84a8665ca1921bbc43444a3db538
-
SHA256
45d4bfdc425fdce112d9dd2adb45dbcbda1dfb921cd74ea0461ab93bb24e49cf
-
SHA512
814186eccafceb9c5b6562de0f973666923a8a02311dc4efbf4c007a9f7e724f3486932d246b5bb19625194ed68ce84698284b3104904a973a5250fbaf29dc7c
-
SSDEEP
49152:cEgtEd/8mqt5Ln5nMNX7Ni5ahh1TfJ8lGcbMTWjDpRXBfQay3Qwa5cCbcmhbT2ct:c4WMjiqhrA3NI3QwcjMrbWt48v3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c3a93724af4c951c4d5d540b8b6d891
Files
-
2c3a93724af4c951c4d5d540b8b6d891.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE