Behavioral task
behavioral1
Sample
2cb15a2a55f42f5d648310f00b0679ee.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2cb15a2a55f42f5d648310f00b0679ee.exe
Resource
win10v2004-20231215-en
General
-
Target
2cb15a2a55f42f5d648310f00b0679ee
-
Size
133KB
-
MD5
2cb15a2a55f42f5d648310f00b0679ee
-
SHA1
70d1f951404b149e0e9ca8b58048c6c68591ada8
-
SHA256
d8e9fbc90155b73ef7c61243adfd6af3160db68e5d0b8e1b0479f13eb5569463
-
SHA512
40935e2f1c41398f56aa748b9d089b9e85d654f6aeb7ff7ce9ada820c924af125cb3469e99b85537a171348c385d77443e7d0e0d70d3e8debc517410431f8397
-
SSDEEP
3072:wOcV8nm/BcLh5gumd8L3n4dCy6RcJFF09q8vITCJBS7wog0HQwT8WAkBHUMQ:wO/mtum+3n44NRerx8vuGDzyQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2cb15a2a55f42f5d648310f00b0679ee
Files
-
2cb15a2a55f42f5d648310f00b0679ee.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE