Behavioral task
behavioral1
Sample
2c6501ad69a5901bd130d410ae3e85a0N.exe
Resource
win7-20240903-en
General
-
Target
2c6501ad69a5901bd130d410ae3e85a0N
-
Size
227KB
-
MD5
2c6501ad69a5901bd130d410ae3e85a0
-
SHA1
3fcec926fbbd29646ccc866a04c979cb74ca94b7
-
SHA256
51834630df09fdf3ae9aab56b17de5e452ebe5dcb5ea5a71b27233ea30fa866a
-
SHA512
378c892953b53c44226e15582eb8eeb98553ebca9677f08b9e7ee1b38bd123651c6d4c0314b8b83e2eac6eae78bbaa097d2ada9625496ddb4302ca4c9b0e3af5
-
SSDEEP
6144:jvNzUzbF68H3S8+b6uyptXIi9u/mp8saZHRD4v4M84Z9YkF/GeHNHyORQdcIKtV:jvw68XS8+d8HamysaZHRD44M3ZzF/Ger
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c6501ad69a5901bd130d410ae3e85a0N
Files
-
2c6501ad69a5901bd130d410ae3e85a0N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ