Behavioral task
behavioral1
Sample
2f7b20bbeb42fc525599d9e27725f8c8c3f553bb355d7dc0be6e51395762c81d.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2f7b20bbeb42fc525599d9e27725f8c8c3f553bb355d7dc0be6e51395762c81d.exe
Resource
win10v2004-20240508-en
General
-
Target
2f7b20bbeb42fc525599d9e27725f8c8c3f553bb355d7dc0be6e51395762c81d
-
Size
3.7MB
-
MD5
6692366e80abd1588cd96a46b6a61768
-
SHA1
52b5685eb0c8bef9a64bdb0172bd0786a80b7e9d
-
SHA256
2f7b20bbeb42fc525599d9e27725f8c8c3f553bb355d7dc0be6e51395762c81d
-
SHA512
8a4d120b7ec9e0012375556032835a03ad74d3089b175709d1b194cef415ce5d84e961630bc3cc631a88b49459ee1bc6a866881d9c474ffc99dca23060b845e5
-
SSDEEP
49152:oWBj/c1LynH401q5nIomqirLsalRnenO+L1iXydofwlLs/HHddIcsoMfBxCNLv9n:2aqjmqw1lRe/J2y45H9BqZxOpo3s
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f7b20bbeb42fc525599d9e27725f8c8c3f553bb355d7dc0be6e51395762c81d
Files
-
2f7b20bbeb42fc525599d9e27725f8c8c3f553bb355d7dc0be6e51395762c81d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 500KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 938KB - Virtual size: 940KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE