Behavioral task
behavioral1
Sample
3424af1ca1845627fa8e6adec65dc229.exe
Resource
win7-20231201-en
Behavioral task
behavioral2
Sample
3424af1ca1845627fa8e6adec65dc229.exe
Resource
win10v2004-20231201-en
General
-
Target
3424af1ca1845627fa8e6adec65dc229
-
Size
323KB
-
MD5
3424af1ca1845627fa8e6adec65dc229
-
SHA1
d241e9247e6d45b9a0ce4b793fed4a24e2baab22
-
SHA256
abeffd63fb004a1eefca420520352c629ae66e727978f53ea83a8b22cc64005c
-
SHA512
9676127fca7d6ba531a65e45d46220a3bfd80ec198da389127fe547ec2cab0ad6576e35b917d6e78be7f89cb19ce40558980983be581815b1d293cb64ed308e6
-
SSDEEP
6144:bNEo/rmV71+I8ZD/h/vFfhxxQO4B4tqv+Hq/On1NHwBzQ4bed76a3FoSxIX:bNEo/6YnZVB1rkAqcNAzQCed7J1oSI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3424af1ca1845627fa8e6adec65dc229
Files
-
3424af1ca1845627fa8e6adec65dc229.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 224KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 313KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE