Behavioral task
behavioral1
Sample
3dba57d4e80b2b5714231c29ae1ef7d9.exe
Resource
win7-20231201-en
Behavioral task
behavioral2
Sample
3dba57d4e80b2b5714231c29ae1ef7d9.exe
Resource
win10v2004-20231215-en
General
-
Target
3dba57d4e80b2b5714231c29ae1ef7d9
-
Size
784KB
-
MD5
3dba57d4e80b2b5714231c29ae1ef7d9
-
SHA1
24de79ad38c2c520649ca383687a1f2a951d522c
-
SHA256
d4567f12686efc12286eb173e04d28da91a17798138bdc2974e672ecb676054e
-
SHA512
83098fecac058f4f7128796209ed81945674077bda4a9fced636fdecb33481a18a9d98bc2ae0dfb0a17dacd3a228e93c034b4533d57659227a7eb020a5ede4c0
-
SSDEEP
24576:sxxVFJGFvn1GSG/3Tm16L/wsnKJ/uWXogF:sNFEV1gLm08CO3H
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3dba57d4e80b2b5714231c29ae1ef7d9
Files
-
3dba57d4e80b2b5714231c29ae1ef7d9.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE