Behavioral task
behavioral1
Sample
2f5e8d9dbc88e1cdd2f340fd182a7930N.exe
Resource
win7-20240708-en
General
-
Target
2f5e8d9dbc88e1cdd2f340fd182a7930N.exe
-
Size
2.9MB
-
MD5
2f5e8d9dbc88e1cdd2f340fd182a7930
-
SHA1
6df9fe183d6fc02c6e17f6817af4ba8fbba8f78a
-
SHA256
e07a22214c53055ec86135b0e0be3cd46a5243ca30174658bdad9d68f35e0d91
-
SHA512
7fb121e8004d908a84f7f073d57ad811b0e76df1449e6a75501d3d42c4a4a497d274269cd2c899defe2f94fa9e671b69ba0eededb8e44285bfae899337d177d8
-
SSDEEP
49152:viw9RdIoqh1wJb2bwJNiHMWIFDtnWCTHY9TEeYRQsq4ay3gS7Ns:rBubaDZRwg3g6s
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f5e8d9dbc88e1cdd2f340fd182a7930N.exe
Files
-
2f5e8d9dbc88e1cdd2f340fd182a7930N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE