Behavioral task
behavioral1
Sample
3694e5f6b3aa60b4c50667cac283f15f795d3ef6d1daf046e5ddfd8608508496.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
3694e5f6b3aa60b4c50667cac283f15f795d3ef6d1daf046e5ddfd8608508496.exe
Resource
win10v2004-20231023-en
General
-
Target
3694e5f6b3aa60b4c50667cac283f15f795d3ef6d1daf046e5ddfd8608508496
-
Size
4.5MB
-
MD5
586a5104f038b18e80c29ce7ae88404c
-
SHA1
07b6cd4439631360302c8a3fbc83a6ec19139b7c
-
SHA256
3694e5f6b3aa60b4c50667cac283f15f795d3ef6d1daf046e5ddfd8608508496
-
SHA512
1bef12bf9e4e7baf63b8c8de6a964c00cebf98bd68de0cfd60afefbe73c1d266fc4a06d6f5e2785460f3542dce4cffd004b1984dbf5741ada58710332d08d186
-
SSDEEP
98304:HTfWIqU52J5rAPFg1Fvjx6XR5XxxRnWhZLpFX85SK1o59gEKb58Ijs5G5gjEXbuW:HiZnJXzKjWlZ8X2Kb5vYE5gjbA34G
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3694e5f6b3aa60b4c50667cac283f15f795d3ef6d1daf046e5ddfd8608508496
Files
-
3694e5f6b3aa60b4c50667cac283f15f795d3ef6d1daf046e5ddfd8608508496.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1000KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3.7MB - Virtual size: 3.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 741KB - Virtual size: 744KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE