Behavioral task
behavioral1
Sample
2bd6e15bb915deacffa6ebe7680f9dc4fa9f3ce9f4624c4a95adb8a53d501958.exe
Resource
win7-20240705-en
General
-
Target
2bd6e15bb915deacffa6ebe7680f9dc4fa9f3ce9f4624c4a95adb8a53d501958
-
Size
105KB
-
MD5
be7b091340488cf6da2a0f313c72388f
-
SHA1
6af7f707072103bd01883a452c11b26a11bc5e8d
-
SHA256
2bd6e15bb915deacffa6ebe7680f9dc4fa9f3ce9f4624c4a95adb8a53d501958
-
SHA512
f428a0507e9fca1e4342bad724403e4311b6cea7dc0435b2b48139ffff8d292ea165d71b35261998720089a9e17eb59e3de1fead07c95429336ae42435ee3af7
-
SSDEEP
3072:chOmTsF93UYfwC6GIout5pi8rY9AABa1oZEQE7Tku:ccm4FmowdHoS5ddWBSRN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2bd6e15bb915deacffa6ebe7680f9dc4fa9f3ce9f4624c4a95adb8a53d501958
Files
-
2bd6e15bb915deacffa6ebe7680f9dc4fa9f3ce9f4624c4a95adb8a53d501958.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE