Behavioral task
behavioral1
Sample
2d6a8c4c147b3d97f8b4c8d1a3c92d1d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2d6a8c4c147b3d97f8b4c8d1a3c92d1d.exe
Resource
win10v2004-20231222-en
General
-
Target
2d6a8c4c147b3d97f8b4c8d1a3c92d1d
-
Size
5KB
-
MD5
2d6a8c4c147b3d97f8b4c8d1a3c92d1d
-
SHA1
4e8fa54bd8771fe37414df43028b224ab6d130dc
-
SHA256
ddebb5dbbfb9907f15378bd38fd84815ba83f6f70a98d358a7962ce509a18f8e
-
SHA512
82b80fe8478abfa93191a55570a59991248f25a4a205eea91db4d77b1286267f78237422e910bc8595282af9fd4e56c4fc6d5bf1865d71989a05f729bf7fd7d3
-
SSDEEP
96:sJ+pH6751VRtwAnogLbroWiSsIxrcf7i9k5q7Ps6VOsE+W4j:sJesjHjJ/roejxrc7MDs9ex
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2d6a8c4c147b3d97f8b4c8d1a3c92d1d
Files
-
2d6a8c4c147b3d97f8b4c8d1a3c92d1d.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE