Behavioral task
behavioral1
Sample
2e270cd8a90f7783dea0de8167ac1180N.exe
Resource
win7-20240704-en
General
-
Target
2e270cd8a90f7783dea0de8167ac1180N.exe
-
Size
3.9MB
-
MD5
2e270cd8a90f7783dea0de8167ac1180
-
SHA1
bf1f447cee1343811c2035b69b7bd916e7186273
-
SHA256
f974b963c77c75ea16fda5b2b460216772dd7163de4b67c14fd1038f322d6ca9
-
SHA512
8fa350371571cda570c2f3496232237404ee049ef3e184c0eeef23d50e128c0ee9ee9dde68eba9414664cdf6e7e07a95b906e917f263b2a33478ced119e76ec6
-
SSDEEP
98304:AiWynf8jPQHN6NlYA9zyULG+kgd8pVPH+A9zyULG+/mQy8mYA9zyULG+kgd8pVP9:Xh87SkrzLqEglHPzLq0O8mVzLqEglHPK
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e270cd8a90f7783dea0de8167ac1180N.exe
Files
-
2e270cd8a90f7783dea0de8167ac1180N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE