Behavioral task
behavioral1
Sample
3555149b0c4266dc9d151b9690f10d24.exe
Resource
win7-20231201-en
Behavioral task
behavioral2
Sample
3555149b0c4266dc9d151b9690f10d24.exe
Resource
win10v2004-20231201-en
General
-
Target
3555149b0c4266dc9d151b9690f10d24
-
Size
784KB
-
MD5
3555149b0c4266dc9d151b9690f10d24
-
SHA1
5f1dbdfea51b5686a720a007a049b9753f7a545a
-
SHA256
0c723ae6c9cc8834aa5592a00c9dff81c4e6f5bcf81b2aeb4f58d2c813176736
-
SHA512
58fdb0fd8da817489d5bed8a4d3cd9df5378e81bcb04e67ca85466e99f92ff96980456026a62bfc6cdcf6e761df7420ee45b2d9911414013de456c06befab477
-
SSDEEP
12288:qBtyvZf0xszc/ZqV6XYToykaQ7Fk8m1JDFiFPqyy8+YqyN2ZujferM5VlIzxZk:qBtyBf0xQoMTbQ7FcJR8iUJpfewLlm
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3555149b0c4266dc9d151b9690f10d24
Files
-
3555149b0c4266dc9d151b9690f10d24.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE