Behavioral task
behavioral1
Sample
VirusShare-2a8ccabb1f146c0a7732addfc46227bd.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
VirusShare-2a8ccabb1f146c0a7732addfc46227bd.exe
Resource
win10v2004-20231222-en
General
-
Target
VirusShare-2a8ccabb1f146c0a7732addfc46227bd
-
Size
204KB
-
MD5
2a8ccabb1f146c0a7732addfc46227bd
-
SHA1
8f0dd177cf77351935b86e786d027979f9c01b77
-
SHA256
40e4901ba7b77905d0568df83b12ec4ea84a324309e89b7aafe12788d3c5325c
-
SHA512
154742ecd4daa7aba08752e37d6997c60b7462432396dd588873320f91bd3c8f709422dc4c0d96ab186f7caeef2701c939b8d3b46e75abc84e5cabc115465e78
-
SSDEEP
6144:ydIpQ9rPhi44v3KBYkNIT11pEHO7j+QMj:ydI+9Ni44vUYkNIJEHO7j+Qi
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource VirusShare-2a8ccabb1f146c0a7732addfc46227bd
Files
-
VirusShare-2a8ccabb1f146c0a7732addfc46227bd.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 468KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 112KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE