Behavioral task
behavioral1
Sample
2a34d2c6873fa1d98bb8126c83d498f9d80b68cc3e4a6dd8b7a0089da9b00752N.exe
Resource
win7-20240903-en
General
-
Target
2a34d2c6873fa1d98bb8126c83d498f9d80b68cc3e4a6dd8b7a0089da9b00752N.exe
-
Size
2.0MB
-
MD5
db81a111a832174bf4951df3986668c0
-
SHA1
6e62f89a2bbd02616180963bd0df398bc4fe9d42
-
SHA256
2a34d2c6873fa1d98bb8126c83d498f9d80b68cc3e4a6dd8b7a0089da9b00752
-
SHA512
7358eef8c4ff9e054d2184d08cffaeb5afe8620f3bda2f857e4733e9e6dd9cc6ae96573e05103da8a68cd1b2f3e8e636a3fdf38652c1d52919306f8f8ce79820
-
SSDEEP
49152:fHmvdIGTEpY0QwnZ9d1a6cMHOPp/98XZhYI8M1zyqkJOctvh/KKlUm3ee:fwCzY0Qwnto6tuPJMJx1z9kJOctvhC0
Malware Config
Signatures
-
Processes:
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 2a34d2c6873fa1d98bb8126c83d498f9d80b68cc3e4a6dd8b7a0089da9b00752N.exe
Files
-
2a34d2c6873fa1d98bb8126c83d498f9d80b68cc3e4a6dd8b7a0089da9b00752N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 4.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reltc Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE