Behavioral task
behavioral1
Sample
2d311ee0f737fead1e7824cf737f2050N.exe
Resource
win7-20240704-en
General
-
Target
2d311ee0f737fead1e7824cf737f2050N.exe
-
Size
29KB
-
MD5
2d311ee0f737fead1e7824cf737f2050
-
SHA1
adb30b8a6970677712da1c6ab513f078288995a9
-
SHA256
942f1baf93884215c416f49d8f600821f26b70650ca723825f6bcad1d51c5917
-
SHA512
cb0fa6a05cec8ccd06d71d44a66ff34da6c587641d54826410d6f95be53004a9e82daf6cb20953210b37c60eaa697a4d27fd9fb91ddccf86c61410b3ca1aee2c
-
SSDEEP
384:JDIg+cHxaCDHDlov0fjJGnQitzaSZvqVhK4iFd:J9DDxfjoBYShq7K4iH
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2d311ee0f737fead1e7824cf737f2050N.exe
Files
-
2d311ee0f737fead1e7824cf737f2050N.exe.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE