Behavioral task
behavioral1
Sample
2dd3481103134a768bd35531cc6a34b177c5bc74b39348b643a34f1b6949f52e.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2dd3481103134a768bd35531cc6a34b177c5bc74b39348b643a34f1b6949f52e.exe
Resource
win10v2004-20240611-en
General
-
Target
2dd3481103134a768bd35531cc6a34b177c5bc74b39348b643a34f1b6949f52e
-
Size
520KB
-
MD5
214f57083ad54865cac4116581320ff2
-
SHA1
ad9ac572d37afeee4c2cf2babb08c8aaaab77177
-
SHA256
2dd3481103134a768bd35531cc6a34b177c5bc74b39348b643a34f1b6949f52e
-
SHA512
1aaa7f1306bc760846389f653ac86f2d1b55cb4d0e129d33e62f89a3fa3841114d47a5434f3a6332a6e14dd67fd0fa323b213e7fb6af067b95d1066dcafa8810
-
SSDEEP
12288:lw6IrVm8DXI6O2kO4YYu/wmaRPq0o9qTIAeQbkTPlD:L2r/wmz0ogTznbaPx
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2dd3481103134a768bd35531cc6a34b177c5bc74b39348b643a34f1b6949f52e
Files
-
2dd3481103134a768bd35531cc6a34b177c5bc74b39348b643a34f1b6949f52e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 764KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 469KB - Virtual size: 472KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE