Behavioral task
behavioral1
Sample
34c0fa16e04333937dfcfa86ca9ad024.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
34c0fa16e04333937dfcfa86ca9ad024.exe
Resource
win10v2004-20231215-en
General
-
Target
34c0fa16e04333937dfcfa86ca9ad024
-
Size
8KB
-
MD5
34c0fa16e04333937dfcfa86ca9ad024
-
SHA1
12f8b368beac318f1d33857c835cfc73c37e8eff
-
SHA256
e4993a7b3333bc459816a5b85bd328831cda83c54da3a0e2cd9ac5468aa8e773
-
SHA512
0ac79622d3318e4ecfa98e071ffc460c88a74f89b63e2e82972534c835b22432c1e6f37d66bf8529459f9f0829e4a8d8c755b08360b24e24c88f3f2e33473f93
-
SSDEEP
192:ie4c5qPuxQrpkayArl8Ba/sg0NUHmPUshJtBB7qG1eSWXgG:d5qPuaruArl8MUg0hrhdB7SSu
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 34c0fa16e04333937dfcfa86ca9ad024
Files
-
34c0fa16e04333937dfcfa86ca9ad024.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 59.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 5.8MB - Virtual size: 5.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE