Behavioral task
behavioral1
Sample
2f49034aa9e09c4ac63b64126e5eef7f837c07aa5672e83a62c97d9de021fe7d.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2f49034aa9e09c4ac63b64126e5eef7f837c07aa5672e83a62c97d9de021fe7d.exe
Resource
win10v2004-20240709-en
General
-
Target
2f49034aa9e09c4ac63b64126e5eef7f837c07aa5672e83a62c97d9de021fe7d
-
Size
1.4MB
-
MD5
696231ae1c74d1567c25a4d4dc854bf9
-
SHA1
2bdc865c23ae3f70cae6703abb73c4ac786658f0
-
SHA256
2f49034aa9e09c4ac63b64126e5eef7f837c07aa5672e83a62c97d9de021fe7d
-
SHA512
cc5cde13b23f947b01fcb7b7fdc5ef292e0b59efd025241543c315aa9e2f07955021f5990fceea12faf3bc7c0625705d1fdb051cc61c50ef72bec6c78a109a2c
-
SSDEEP
24576:aTQU6IBdzHjn4ZoC/CTLuBPOXeZFzAr6tGYzPaDSu7niuJ:aPzD4+CcLuYXmVA6kYzPaDdi
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f49034aa9e09c4ac63b64126e5eef7f837c07aa5672e83a62c97d9de021fe7d
Files
-
2f49034aa9e09c4ac63b64126e5eef7f837c07aa5672e83a62c97d9de021fe7d.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 49KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE