Behavioral task
behavioral1
Sample
3ab7e987f6faa4676714f71c21f7a0d75f72e8c7512e6ac87b41d81356f15191.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
3ab7e987f6faa4676714f71c21f7a0d75f72e8c7512e6ac87b41d81356f15191.exe
Resource
win10v2004-20230831-en
General
-
Target
3ab7e987f6faa4676714f71c21f7a0d75f72e8c7512e6ac87b41d81356f15191
-
Size
782KB
-
MD5
d5eb9a8cc571b58c9bbacafa243f89b6
-
SHA1
cfdb505fa310deadb3ad46b99503da216d05aa8a
-
SHA256
3ab7e987f6faa4676714f71c21f7a0d75f72e8c7512e6ac87b41d81356f15191
-
SHA512
d2ca2cb5fa17be90b6baa9c0147409f1f93e2724a10743d6f071f25b7639e3699c16ec6e5e07af76e5cad5de017ee9db620e0b2db8da20efe6b41da9a804ecc3
-
SSDEEP
12288:veAmVmX/za9iRdblsL3qgxPh+f/iTVoS5lNk:veVQ/za9iPblc3qQ+CTTN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ab7e987f6faa4676714f71c21f7a0d75f72e8c7512e6ac87b41d81356f15191
Files
-
3ab7e987f6faa4676714f71c21f7a0d75f72e8c7512e6ac87b41d81356f15191.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 984KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 719KB - Virtual size: 720KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 62KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE