Behavioral task
behavioral1
Sample
3ec09c9134a605ebe6767686e7eecb17cea2ea8754e11c4328be6b6e12b97a8b.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
3ec09c9134a605ebe6767686e7eecb17cea2ea8754e11c4328be6b6e12b97a8b.exe
Resource
win10v2004-20230703-en
General
-
Target
3ec09c9134a605ebe6767686e7eecb17cea2ea8754e11c4328be6b6e12b97a8b
-
Size
6.2MB
-
MD5
c0b6e00f18751db344879af9bae2bf0d
-
SHA1
851bfbd3a886828f111e86e98490f4a4d25e5cd7
-
SHA256
3ec09c9134a605ebe6767686e7eecb17cea2ea8754e11c4328be6b6e12b97a8b
-
SHA512
150b5dcd37b45229423ae0ce4d5f93959d2f55ffc1854373fd3565f399a4a68fb0c1fef339257307e330b1e5d6b868c9895bb1f89f6547e0c27c63b292f51226
-
SSDEEP
24576:BdPjSN3lFtjoWed/jFJv7Y30WaRrXBhxUTpeo:BJUlFUdvjYEWa1Sp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ec09c9134a605ebe6767686e7eecb17cea2ea8754e11c4328be6b6e12b97a8b
Files
-
3ec09c9134a605ebe6767686e7eecb17cea2ea8754e11c4328be6b6e12b97a8b.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 6.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 6.2MB - Virtual size: 6.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE