Behavioral task
behavioral1
Sample
2def8085f48d112f8a38c85ebc303890N.exe
Resource
win7-20240708-en
General
-
Target
2def8085f48d112f8a38c85ebc303890N.exe
-
Size
69KB
-
MD5
2def8085f48d112f8a38c85ebc303890
-
SHA1
a269101ad86e7e5b517337607c569c1b52ced52e
-
SHA256
e6b94e312e0403730de0970dd14f0772b496beefaf6b901793c45820140a8f64
-
SHA512
a61b78314cfea5bbd745d7126a4e2311746f5ab61fe86e3083645159742debf4e89acbff2e8e7c42c5af8dc9c49d92141db025e9084e71e7401b4149b3ea2f5c
-
SSDEEP
768:H7Xezc/T6Zp14hyYtoVxYBY37054VNPsED3VK2+ZtyOjgO4r9vFAg2rqm:b6zqhyYtkYSHYTjipvF2r
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2def8085f48d112f8a38c85ebc303890N.exe
Files
-
2def8085f48d112f8a38c85ebc303890N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE