Behavioral task
behavioral1
Sample
2c678392b522c55ed9d3f98b04a44f41.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2c678392b522c55ed9d3f98b04a44f41.exe
Resource
win10v2004-20231215-en
General
-
Target
2c678392b522c55ed9d3f98b04a44f41
-
Size
302KB
-
MD5
2c678392b522c55ed9d3f98b04a44f41
-
SHA1
a2ab054e291d0b28a9b63c6680cf42753440574e
-
SHA256
2f8a709a490202f83aa01cecd360ff1263cf49e7470dc095f5e418b329d4c43a
-
SHA512
ed97d2a8afe861a916196d1251584dcee3df959d2c7b3ba85a2ae4bcb76b29a831c8ca2c7f89edc6d8405e2bac15678c542cbc980814e060dbbe37bcf1181e88
-
SSDEEP
6144:QT/rwm3FAz1vnzBO8YxikSjkyF9QMm/T9mQ:Q/HAzPSkkStqMAT9m
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c678392b522c55ed9d3f98b04a44f41
Files
-
2c678392b522c55ed9d3f98b04a44f41.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 588KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 195KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE