scan
Behavioral task
behavioral1
Sample
2cdad9b2585ee2163d7fa56e2a74e03a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2cdad9b2585ee2163d7fa56e2a74e03a.exe
Resource
win10v2004-20231222-en
General
-
Target
2cdad9b2585ee2163d7fa56e2a74e03a
-
Size
18KB
-
MD5
2cdad9b2585ee2163d7fa56e2a74e03a
-
SHA1
490c68f25231c9dfcddeba52f836e1cc294a6225
-
SHA256
6953688d60e0ee944fc160212bc968b8e755cd02464c0dbbe2d0e058fdeaa84d
-
SHA512
6f2a24b42c9a2fd4a8bfd8afaf11e466f4b28ea2dd3970bea4c68bb7bad469bb700f25a024c8eb190364ac63bfb3548ff8a4f9685589c74a993251ffb89ce4fb
-
SSDEEP
384:1+zuhnLJYndxca46lvumHedg/4qbFgGjND07xrYHD92RGT5ksMOg8Z59ce:EzuhnLuwcctMWGjND+rYH0GT57M8ce
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2cdad9b2585ee2163d7fa56e2a74e03a
Files
-
2cdad9b2585ee2163d7fa56e2a74e03a.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
UPX0 Size: - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE