Behavioral task
behavioral1
Sample
2f524fe0443b7dfe6e61d96d1ebc7cfc2f0a1beb50a98b684393aa071c40ee28.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2f524fe0443b7dfe6e61d96d1ebc7cfc2f0a1beb50a98b684393aa071c40ee28.exe
Resource
win10v2004-20231222-en
General
-
Target
2f524fe0443b7dfe6e61d96d1ebc7cfc2f0a1beb50a98b684393aa071c40ee28
-
Size
633KB
-
MD5
7f61775b7167692ff8c73aa39a59b639
-
SHA1
095c0a8a081731a0b01c6d7cc5266e46d2ab4b7e
-
SHA256
2f524fe0443b7dfe6e61d96d1ebc7cfc2f0a1beb50a98b684393aa071c40ee28
-
SHA512
30274515b0628ad46d17baaf0e724718d3606656486550a7b440362f765d6588f312203aa25bba8cbb77738634c868eb210783908acf41f7bc85f8c8d30dad5a
-
SSDEEP
12288:38hn/QAuoiDa6n+ljpWjK8TJLz+cjWk9TfhKR5v+72L4AYLdPEm2kd:370ipm0jmcSOhGA+uM6d
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f524fe0443b7dfe6e61d96d1ebc7cfc2f0a1beb50a98b684393aa071c40ee28
Files
-
2f524fe0443b7dfe6e61d96d1ebc7cfc2f0a1beb50a98b684393aa071c40ee28.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1024KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 574KB - Virtual size: 576KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lea Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE