Behavioral task
behavioral1
Sample
2cccb3fc0ebf0b2a343b66b4dd40a6fb.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2cccb3fc0ebf0b2a343b66b4dd40a6fb.exe
Resource
win10v2004-20231222-en
General
-
Target
2cccb3fc0ebf0b2a343b66b4dd40a6fb
-
Size
102KB
-
MD5
2cccb3fc0ebf0b2a343b66b4dd40a6fb
-
SHA1
bfc9abe64f4c43c2995ca25e29d883b0eddefc76
-
SHA256
c6e4b0ac57a1d9b074ef486b35acfc58a3d91287c7673e31bb8f56f76bfe1202
-
SHA512
0f51f9933315bb5245944f4e546dbf802351ade6c055b22c0184eeac5e92de72967c5b7ed181519b574a61968ad4bdb9ee54f353741f2c03191a6744a5081ca9
-
SSDEEP
3072:Le4YT2hesdKx/rmRgLDhMMqX3mH1uHAZ:ITipdKxZ/h5nH1uH
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2cccb3fc0ebf0b2a343b66b4dd40a6fb
Files
-
2cccb3fc0ebf0b2a343b66b4dd40a6fb.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 216KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 94KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE