Behavioral task
behavioral1
Sample
2089b7dbbe78411d245460b8b9a2210f.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2089b7dbbe78411d245460b8b9a2210f.exe
Resource
win10v2004-20240319-en
General
-
Target
2089b7dbbe78411d245460b8b9a2210f
-
Size
574KB
-
MD5
2089b7dbbe78411d245460b8b9a2210f
-
SHA1
8fc1ae069ec55b824ce2fc3f78ac3067a85ec6a4
-
SHA256
49097975832dda80b7514449e6602d25c819a4224f0511e4df61b81ddd46c954
-
SHA512
8cd74a100b8bcd4e855555c15155dedc2d69c04813fb49b7d220007a5574c0ace9292f403cdb99aa57169ebd78fdfdd896b657a5ea93815d27112e4fa62af11a
-
SSDEEP
12288:lXpqhQXXsVs97GCRSC6XDtNJSDPmt/YVh5u8Rz91/la5aMu8S:lUQUs97G9jz0DcwVhZR/k50T
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2089b7dbbe78411d245460b8b9a2210f
Files
-
2089b7dbbe78411d245460b8b9a2210f.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.g Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qhw Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE