Behavioral task
behavioral1
Sample
2be494f4ed0750cc61e9c19beab34cf0N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2be494f4ed0750cc61e9c19beab34cf0N.exe
Resource
win10v2004-20240709-en
General
-
Target
2be494f4ed0750cc61e9c19beab34cf0N.exe
-
Size
1.5MB
-
MD5
2be494f4ed0750cc61e9c19beab34cf0
-
SHA1
f90f32a5e6b6cdf0de2a60fe336ce9664b241b60
-
SHA256
3e1cee4866048fff0c986096f37c78e484a5868d4ee2224c7824ee9360a67f59
-
SHA512
970a96f9d75459dfc8eb0b5c434a417d4ca5272f661e7d25fbfd060f2b108b61cad3dc8e107507c4ebdd955425a25e6ef7ca0f933d634076753fe42928603054
-
SSDEEP
24576:A8iPSBclwJIPvF7u/Ej7fKF39WyTLdQF0iD9C1Kl8W1DuPy/RHQfvycnkcD9tEUx:A16elD8qKF3UALdCDUEuMwbkcDPPXkAh
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2be494f4ed0750cc61e9c19beab34cf0N.exe
Files
-
2be494f4ed0750cc61e9c19beab34cf0N.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.edlwv Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.oh Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE