Behavioral task
behavioral1
Sample
2ca51fdb001f269fa31093fd5743369f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2ca51fdb001f269fa31093fd5743369f.exe
Resource
win10v2004-20231215-en
General
-
Target
2ca51fdb001f269fa31093fd5743369f
-
Size
2.6MB
-
MD5
2ca51fdb001f269fa31093fd5743369f
-
SHA1
9e439f5438e2f56de68509a6039fe1d5cb644b94
-
SHA256
bf44bd60416d157c0129a8334a2dc2929feee87286e92424ab424101f3955863
-
SHA512
31a45fd50816692984831c4b6d34ff725486e60510fd7f531c5944980fc6b4edb18218c81b7fe47ee97d688773820349328e7e25491c603522d994ca35dd69ee
-
SSDEEP
49152:pI68R6Q/OPG+B71N9bXddkvTB+0V0zT8eZqWay3:Xnz++5//J3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ca51fdb001f269fa31093fd5743369f
Files
-
2ca51fdb001f269fa31093fd5743369f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE