Behavioral task
behavioral1
Sample
3f3f69bc9a45b1e646150a2be0d9c415.exe
Resource
win7-20231201-en
Behavioral task
behavioral2
Sample
3f3f69bc9a45b1e646150a2be0d9c415.exe
Resource
win10v2004-20231215-en
General
-
Target
3f3f69bc9a45b1e646150a2be0d9c415
-
Size
784KB
-
MD5
3f3f69bc9a45b1e646150a2be0d9c415
-
SHA1
d1d026ceb98a806d2112e8e9a857220837b04797
-
SHA256
4b91701c11961df8d7cadff3142023f18b0bee62ff0f67f9f84fa8adbd1e035c
-
SHA512
c05251a188be713083b54d3255a6edf287fc7ee846c1daa7877546b928ff4709be61421b632d3d5845765a16b9f2e3da76442d32789a79e98e71256d70a65b0a
-
SSDEEP
24576:SrPeNbmaOKwT+ExEhjzjgd24rNvFhqTnmc:GPepQk+EhTgdVjh
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3f3f69bc9a45b1e646150a2be0d9c415
Files
-
3f3f69bc9a45b1e646150a2be0d9c415.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE