Behavioral task
behavioral1
Sample
3e30e38d915660ed50fb4ef3277b6b65.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3e30e38d915660ed50fb4ef3277b6b65.exe
Resource
win10v2004-20231222-en
General
-
Target
3e30e38d915660ed50fb4ef3277b6b65
-
Size
2.9MB
-
MD5
3e30e38d915660ed50fb4ef3277b6b65
-
SHA1
9aaf6a0a57246178ac0ffeb3d2f1558ad599b9fe
-
SHA256
222e6f76f7b668c07da78dbcc9231b0bf7cd31b8077ecbf9bd1d118280ba2b9a
-
SHA512
a31ce21d79f723890cf99830efbb5ada8e540d468fc25e366232917f0f13c4f1e4d23465a6c35d34a492fac80e3bcf06d1dd2450a3dc067f309d71987fd39e4e
-
SSDEEP
49152:LDkGAqlgP6Rapr7CuHTP4M338dB2IBlGuuDVUsdxxjeQZwxPYRKs:HkGAQT+r2YTgg3gnl/IVUs1jePs
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e30e38d915660ed50fb4ef3277b6b65
Files
-
3e30e38d915660ed50fb4ef3277b6b65.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE