Behavioral task
behavioral1
Sample
3f4c2ae087a847fb1fdd9e2d9d9da9d0.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3f4c2ae087a847fb1fdd9e2d9d9da9d0.exe
Resource
win10v2004-20231222-en
General
-
Target
3f4c2ae087a847fb1fdd9e2d9d9da9d0
-
Size
52KB
-
MD5
3f4c2ae087a847fb1fdd9e2d9d9da9d0
-
SHA1
82c5ddb167c0aa50da0d5988152e5c938bb74175
-
SHA256
dc63cd2c9ea5cd2f5e2ff31123bb0f23e94aef53e1250dbbbebf6fa116527e5f
-
SHA512
a2779fa68c9d5cf33c32b6c271f3747f295e3e8bd86f02e5bbe53ac47b2935bbc99b960e8afb3b9518e433a23a360695524196db428cb7cbf74e0e9860a5b69f
-
SSDEEP
768:EDB1fezbJiu+gvTrxvjjRgD1Ta31Mewnl24vMLNBr2joRz5QvgNjzKVaS3k7p0cj:EDBkcu+gRpgD1ZFjYXr96IRzKn0d0c60
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3f4c2ae087a847fb1fdd9e2d9d9da9d0
Files
-
3f4c2ae087a847fb1fdd9e2d9d9da9d0.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE