Behavioral task
behavioral1
Sample
3294e0521c8ac90a7ec542099dcc1916.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
3294e0521c8ac90a7ec542099dcc1916.exe
Resource
win10v2004-20231215-en
General
-
Target
3294e0521c8ac90a7ec542099dcc1916
-
Size
8KB
-
MD5
3294e0521c8ac90a7ec542099dcc1916
-
SHA1
11f9132581882cf5efdc7e361df3e6e408b5059b
-
SHA256
fe01eb0749ca8cab7defda58a2e11c18f59b295a62043685c7d7aea57f159399
-
SHA512
e489afb0d22788c151f900c99335e0ca60cde97a9f4f3f39e31dfd43b42bafdbd185b544befec602ff917e5059ab31fef31f5b620c28aa534a1743ab44978115
-
SSDEEP
96:VG9lPotarmYzXYpmSHEgOEpJwthc/K0FGGrFzP8M8Y13S3+0r2ol8mcU/AfsbVnL:uXaY7mmi8EU3cFGG389vrh8tsluYFZ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3294e0521c8ac90a7ec542099dcc1916
Files
-
3294e0521c8ac90a7ec542099dcc1916.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 420KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 329KB - Virtual size: 332KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE