Behavioral task
behavioral1
Sample
2a8c36cd370ab492bf4774d1ea8c16a0N.exe
Resource
win7-20240708-en
General
-
Target
2a8c36cd370ab492bf4774d1ea8c16a0N.exe
-
Size
263KB
-
MD5
2a8c36cd370ab492bf4774d1ea8c16a0
-
SHA1
2682ee60b2c6665023d924808f27f980f689411f
-
SHA256
0959ea0cab353ddfafb8975f9fb1e7fe5688718d7940ce9d6e07f874756abe3b
-
SHA512
4f0550f0deea62f919278f6ceed1bf0e3b38d091d5fd869186a8f292e042d8e4ab7382b9cd1f3aafe7080ec45a4eedd14b870a96407495461352ca2c7a1ba5c1
-
SSDEEP
6144:kcm4FmowdHoSphraH+W0+9JGW594s2jULIDNc71raHw:y4wFHoS3eeWR9JGW594tjU6wgHw
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a8c36cd370ab492bf4774d1ea8c16a0N.exe
Files
-
2a8c36cd370ab492bf4774d1ea8c16a0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tkjdelw Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE