Behavioral task
behavioral1
Sample
2d7718eb38040e79e99a7bb5fc498d46.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2d7718eb38040e79e99a7bb5fc498d46.exe
Resource
win10v2004-20231222-en
General
-
Target
2d7718eb38040e79e99a7bb5fc498d46
-
Size
2.7MB
-
MD5
2d7718eb38040e79e99a7bb5fc498d46
-
SHA1
3329d2b6a1bfd5387655a3e8b9598bc295ca8ed3
-
SHA256
2e3e26d7b4c7da296b924f4bd6743661d3453a8f45df0c2aa2c4148688858117
-
SHA512
0976946dc052275385b6d450d556f7a0489b6bb2a58afce9dd82db9d513cb5d16fc472cc9f0fb2759794e91c1f561c81ff303d5b8090320a2e9983a5b452848b
-
SSDEEP
49152:XV8cvT7mq8HhVuN4lhVreVQC+CJYnoLbJgYcKuzZ0f+4dWFzI0gf:XWSmdnEDxbJmWf+46hgf
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2d7718eb38040e79e99a7bb5fc498d46
Files
-
2d7718eb38040e79e99a7bb5fc498d46.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE