Behavioral task
behavioral1
Sample
3349126cb3b9122051c92e029a17e3f0f803d30579a1f72b53fd79cd4ffa3cff.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
3349126cb3b9122051c92e029a17e3f0f803d30579a1f72b53fd79cd4ffa3cff.exe
Resource
win10v2004-20230703-en
General
-
Target
3349126cb3b9122051c92e029a17e3f0f803d30579a1f72b53fd79cd4ffa3cff
-
Size
534KB
-
MD5
ac73dc4dc7c91eebfc4242c148aa9388
-
SHA1
c3e5ee1b42f9c541280236c9a40283767ed04ad0
-
SHA256
3349126cb3b9122051c92e029a17e3f0f803d30579a1f72b53fd79cd4ffa3cff
-
SHA512
9d36702616996413afad43c6180397b36dd0439fe1e8c3e86ed2a4f2761190b9a3f8cd8132914caa0b5728809e5d345c555d0d9457b996c66bcb6258091daba5
-
SSDEEP
6144:K9JvsoSImBrTf7WzgfiH9PAJtgL9tfPV9PZTIqjU4p/wV3psEv86sPRv:UJvMIm9Tf7ceCjXpp/+/v8fp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3349126cb3b9122051c92e029a17e3f0f803d30579a1f72b53fd79cd4ffa3cff
Files
-
3349126cb3b9122051c92e029a17e3f0f803d30579a1f72b53fd79cd4ffa3cff.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 832KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 531KB - Virtual size: 532KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE