Behavioral task
behavioral1
Sample
2c82f5c687d7d7d80f5af1331fcebedc.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2c82f5c687d7d7d80f5af1331fcebedc.exe
Resource
win10v2004-20231215-en
General
-
Target
2c82f5c687d7d7d80f5af1331fcebedc
-
Size
133KB
-
MD5
2c82f5c687d7d7d80f5af1331fcebedc
-
SHA1
f3346bfd25e9f3a117b79649916b75a27f3fc846
-
SHA256
883665b8c23305fae3867b4d95a00673d1d6b5e4068e0159f6db4605137e341c
-
SHA512
89b16a8610f05b885c4970ca7c8eafccdcb3099f6e55e750da37d89321a27e59701c811c5f843b101ae1e9eabf8ff9bc1eccf6611f75a2c790b84a8f9017dd01
-
SSDEEP
3072:twJHfFAq/ePmxBHY1fz2QxqwbmOL+A/GeZyLury9+YVQtg+GuLBT9EQ:AxKL2QgOyA/3LekGuLN9EQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c82f5c687d7d7d80f5af1331fcebedc
Files
-
2c82f5c687d7d7d80f5af1331fcebedc.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE