Behavioral task
behavioral1
Sample
a3a7d36eeb4a3db9f20bcb4fec191728.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
a3a7d36eeb4a3db9f20bcb4fec191728.exe
Resource
win10v2004-20231215-en
General
-
Target
a3a7d36eeb4a3db9f20bcb4fec191728
-
Size
5.8MB
-
MD5
a3a7d36eeb4a3db9f20bcb4fec191728
-
SHA1
e462ebdf493e09128982cd604be130206322af41
-
SHA256
e173111cdb2e9852c4733226547ca5cfc076ccfd1a6fa6273b89078dc8a22dc3
-
SHA512
609487b621a2072ce39892ed7a4979c10b83d6f62d7b65c40fcd71892bd7d7ecaab3161c67aca9994a72672c6848767f579c3655d73a8227d2c1f60da5fad6fc
-
SSDEEP
98304:MmZWUWugg3gnl/IVUs1jePshSl7iKW4tsfLc2gg3gnl/IVUs1jePs:toUWagl/iBiPSsjygl/iBiP
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a3a7d36eeb4a3db9f20bcb4fec191728
Files
-
a3a7d36eeb4a3db9f20bcb4fec191728.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE