Behavioral task
behavioral1
Sample
2dc14f734e0dbb1c3499c1a213ee7ed0N.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
2dc14f734e0dbb1c3499c1a213ee7ed0N.exe
Resource
win10v2004-20240802-en
General
-
Target
2dc14f734e0dbb1c3499c1a213ee7ed0N.exe
-
Size
59KB
-
MD5
2dc14f734e0dbb1c3499c1a213ee7ed0
-
SHA1
fddd13e22d76580adec3d649c270e8fa5ffca616
-
SHA256
9374b5e0ce19c029660c9e960b1a3d814022932e415b35de022390dee16e8652
-
SHA512
ddab8d7a16fa83a86ad54d4d82add49dcdfae043b759cff246c0b406568665dfa92b459c6dc486cd16b1af2c29cfb501161c4d66a059a619d3677fa47f22cff8
-
SSDEEP
768:V7Blpf/FAK65euBT37CPKKQSjyJJ1EXBwzEXBwdcMcI9HXEpwuD7I/pwuD7Iy:V7Zf/FAxTWoJJ7TFXCwnwA
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2dc14f734e0dbb1c3499c1a213ee7ed0N.exe
Files
-
2dc14f734e0dbb1c3499c1a213ee7ed0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE