Behavioral task
behavioral1
Sample
2c92d048ea549e6ee198880a1018f0cf.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2c92d048ea549e6ee198880a1018f0cf.exe
Resource
win10v2004-20231222-en
General
-
Target
2c92d048ea549e6ee198880a1018f0cf
-
Size
133KB
-
MD5
2c92d048ea549e6ee198880a1018f0cf
-
SHA1
0d67b4fe2add1c63c679c3ee7a430475edac140e
-
SHA256
1a76a483728d5851a60e7e3e549adc899a199a8709a71e74df5936725f397432
-
SHA512
c4018f4cecf28ca781ee077588f2317c8f7ce387b28eb5be1206a42d4ccc4a88505a4690bb2d34775f6caf6484577b5b10030ffdec2484e5bc03afb20863c5cd
-
SSDEEP
3072:EdGEYTRJB+MhnAcdBFrB3/0snna1aUfrrwc+65ds5W9/YAljZY1P26+Q:lE2vhAcX5Gs4aUTrwcT5dsEqAVk2ZQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c92d048ea549e6ee198880a1018f0cf
Files
-
2c92d048ea549e6ee198880a1018f0cf.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE