Behavioral task
behavioral1
Sample
2b1063388756ca84f23d331a696136abff256aada4bf10c3b0023fe94104a654.exe
Resource
win7-20240508-en
General
-
Target
2b1063388756ca84f23d331a696136abff256aada4bf10c3b0023fe94104a654
-
Size
293KB
-
MD5
efe36b5b16d33654828c883c7858725e
-
SHA1
f60f440a5effbef6ac271cbb875c08ac93722196
-
SHA256
2b1063388756ca84f23d331a696136abff256aada4bf10c3b0023fe94104a654
-
SHA512
626295c812169493ce31c5152dcf8635140dd3671c46650d1ddf608f13ae4bd6535955a2e7dcd233703f00f3c112140acbf4420ab96c4a63725a1044063d7af3
-
SSDEEP
6144:9cm4FmowdHoS4/8UJCf4upvUjQSmpikAAF8:/4wFHoS4kUJE4IuzQifAF8
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b1063388756ca84f23d331a696136abff256aada4bf10c3b0023fe94104a654
Files
-
2b1063388756ca84f23d331a696136abff256aada4bf10c3b0023fe94104a654.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE