Behavioral task
behavioral1
Sample
2ca4ec1d010697f05f686824f749f080N.exe
Resource
win7-20240705-en
General
-
Target
2ca4ec1d010697f05f686824f749f080N.exe
-
Size
162KB
-
MD5
2ca4ec1d010697f05f686824f749f080
-
SHA1
2da70dfacc2523d6641ccfcc144dd3d8da654467
-
SHA256
6823ecca63053242a2c05e91fa61654d0c629b5aecd99a3eb0d07cad18635596
-
SHA512
82d590cdbc45111f98d56c1fe75954719138385472b736924ba7cc1ee4dec6cc1d53eab6bdafb9c494d9f1365797c1e8dd436a99974d1ddbdf18c762ff64d92b
-
SSDEEP
3072:khOmTsF93UYfwC6GIoutpYcvrqrE66kropO6BWlPFH4tednypYhTP:kcm4FmowdHoSphraHcpOFltH4tuyp4T
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ca4ec1d010697f05f686824f749f080N.exe
Files
-
2ca4ec1d010697f05f686824f749f080N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tkjdelw Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE