Behavioral task
behavioral1
Sample
2c4dccf5583cf475dd4e1f1227642f2c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2c4dccf5583cf475dd4e1f1227642f2c.exe
Resource
win10v2004-20231215-en
General
-
Target
2c4dccf5583cf475dd4e1f1227642f2c
-
Size
56KB
-
MD5
2c4dccf5583cf475dd4e1f1227642f2c
-
SHA1
41e6fe9392a51d00f3a12b586e6d3b92d6b9bd8e
-
SHA256
65f07f92c513f52eb63069a6198b464b2cfb1b0c924ef7b0d6029b41bf0f47d5
-
SHA512
473831e8a363fc249ea41d7f3c3cb852bf60ee4d646640fc5e5e37f007333faad3cf10da923fffae6cf88b210596c8b06b1005b89ad33b04d4528c03d0c5507d
-
SSDEEP
1536:pw7HbPnymw32z/aV/BljguuDx5/VNdGYr:pw7HLnymwmLS4lU
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c4dccf5583cf475dd4e1f1227642f2c
Files
-
2c4dccf5583cf475dd4e1f1227642f2c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 168KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 55KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE