Behavioral task
behavioral1
Sample
2884d9f39e52e14f6ae9d8c4a17ed897.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2884d9f39e52e14f6ae9d8c4a17ed897.exe
Resource
win10v2004-20240226-en
General
-
Target
2884d9f39e52e14f6ae9d8c4a17ed897
-
Size
1.6MB
-
MD5
2884d9f39e52e14f6ae9d8c4a17ed897
-
SHA1
797553e30767719e74bff17770c121c02d9d548c
-
SHA256
f8b202763668dc88cbe9383986043a08d7abd2dd0142a38dc76f905da77fd1ce
-
SHA512
22c6dcde24c9a3a71f43a743776213ad1d982cafae725c30b09bd6f2ff9fb437f7c8ab52c653c58c1f581e3f71c8475eae2cb5ce672c7f556e588a05f7309c25
-
SSDEEP
49152:FflbMBSHYO3yiRB4RSk4yXAZXd2veYFl9BD:FNpn3yWk/XfL
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2884d9f39e52e14f6ae9d8c4a17ed897
Files
-
2884d9f39e52e14f6ae9d8c4a17ed897.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.jxmnr Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lpkez Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.g Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ