Behavioral task
behavioral1
Sample
2cd3e186d3afa8c7058773fa344a0a40N.exe
Behavioral task
behavioral2
Sample
2cd3e186d3afa8c7058773fa344a0a40N.exe
General
-
Target
2cd3e186d3afa8c7058773fa344a0a40N.exe
-
Size
147KB
-
MD5
2cd3e186d3afa8c7058773fa344a0a40
-
SHA1
f492a9a735fa43a7898f1d8e8c797cc3afcab3bd
-
SHA256
c880e1d60682374b37a1f7b2e3f6dbe8a03a73d71bfa0ca30223830aa92c3cce
-
SHA512
bee7c7fc1f357888f74e4befd2785b03697a3e70887b8a93411a1cb920b9ea9097d97be78aae931bb426c2b1dc501624c6ac546325cf68fa69020b6f1590c776
-
SSDEEP
1536:V7Zf/FAxTWoJJ2WjWZCqCsxWgx40x47CYK7JH8Am+W7T37R7OFY2a9NnxRzSU8CW:fny1H2NFcPdYykQwMMxi7FTqjX2OsFW
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2cd3e186d3afa8c7058773fa344a0a40N.exe
Files
-
2cd3e186d3afa8c7058773fa344a0a40N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE