Behavioral task
behavioral1
Sample
2579bb7e1387bbc8b2409f2114dbeb20.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2579bb7e1387bbc8b2409f2114dbeb20.exe
Resource
win10v2004-20240704-en
General
-
Target
2579bb7e1387bbc8b2409f2114dbeb20.exe
-
Size
46KB
-
MD5
2579bb7e1387bbc8b2409f2114dbeb20
-
SHA1
bb7e60dbc40903ffc7dbfe9ef691d91252a6bff6
-
SHA256
2118e8c3fff18105ff30ee8a4e868673b1437b87b3420b8d5b70a30218f8df8e
-
SHA512
2c4441667fed62ecae621b25f1665f0596eabc703b5e493790c3d09ef5cb0c6d02d0078665300e5ea5bd5ccd0d1be55796c6ba3d7009d649e4cf4a59a7ea09f7
-
SSDEEP
768:V7Blpf/FAK65euBT37CPKKQSjyJJjtf8WUtf8WGoj9COieQJfoj9COieQJMOxhU8:V7Zf/FAxTWoJJ2WjWpf1fLqhUkn3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2579bb7e1387bbc8b2409f2114dbeb20.exe
Files
-
2579bb7e1387bbc8b2409f2114dbeb20.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE