Behavioral task
behavioral1
Sample
2cd1f63a23ac032e9249b38f22a19de2.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2cd1f63a23ac032e9249b38f22a19de2.exe
Resource
win10v2004-20231215-en
General
-
Target
2cd1f63a23ac032e9249b38f22a19de2
-
Size
318KB
-
MD5
2cd1f63a23ac032e9249b38f22a19de2
-
SHA1
b3439be4969a2dddd5482ed7941c63122c3d340c
-
SHA256
9de6f6e62f73618aca22d2fa9c2d3f86d119fddff997d74c40256a545a435a02
-
SHA512
4baa848e764d24078a6d9eb2747ddef8ddebc55e94d0078f6f94d1a5d2d8a785dea54f1d36d28a53d888a465659f295999709c98f147ef25326e1e6e33e808f1
-
SSDEEP
6144:hGXX8Kua00YqBKbjCf/qe71CFJxfm9jm0zf2XZfgSPr2athMayN7/y:hg8F0tKbjE3gDKz2ZfgkrtTMFV/y
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2cd1f63a23ac032e9249b38f22a19de2
Files
-
2cd1f63a23ac032e9249b38f22a19de2.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE