Behavioral task
behavioral1
Sample
a3cb70591045a102b395630808641db7.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
a3cb70591045a102b395630808641db7.exe
Resource
win10v2004-20231222-en
General
-
Target
a3cb70591045a102b395630808641db7
-
Size
6.0MB
-
MD5
a3cb70591045a102b395630808641db7
-
SHA1
438ac16b7966305ad6a084c0a830e785f1fc6949
-
SHA256
845d605208d5dd3ac8afe2b0de471340ee8ee9c1ea703facf7fa2ba6a8b75989
-
SHA512
3bc796880c202c2fae0bf15604ab9d3e20dce9705b70d05171645819adc97cfb9f3606d740a03843680e4e50c6c26e888ffe47be4bb69b4dfe5555b40e9e2881
-
SSDEEP
98304:OrdWBNKf8kAxcak9i7GiJacakWSQgGZTtSjOuHcak9i7GiJacakdnqUg1VjGF6c4:OZEkUkAxdTudtzxkjVHdTudWnCfGAdTp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a3cb70591045a102b395630808641db7
Files
-
a3cb70591045a102b395630808641db7.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE