Behavioral task
behavioral1
Sample
2c5066dc056b96ca1b833bc9e71d3995.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2c5066dc056b96ca1b833bc9e71d3995.exe
Resource
win10v2004-20231222-en
General
-
Target
2c5066dc056b96ca1b833bc9e71d3995
-
Size
23KB
-
MD5
2c5066dc056b96ca1b833bc9e71d3995
-
SHA1
8b84edf7f28442002b259d27fdd309621609b1b6
-
SHA256
7dfdc5bc0bbad0c5527303ded2bb3a5c5c9ed5c48c763fda899aa313ae96ed73
-
SHA512
8f1f3c731e35c1f7524e2d24186968a062f7f40e2980ce4a0b31c5b5817fc02194b75e232711edb3fa81b673c68cb9033e972a0d3bf7e08b782606a43b6b5fbf
-
SSDEEP
192:5+doBNQlUjGgMUhrniMRqS4t9GuIq0ZxpfFpbpc+:4dYQlviniMRqSG5qxpfnO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c5066dc056b96ca1b833bc9e71d3995
Files
-
2c5066dc056b96ca1b833bc9e71d3995.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE