Behavioral task
behavioral1
Sample
3361c903d5b55516c1713ee36f5a9ee8.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3361c903d5b55516c1713ee36f5a9ee8.exe
Resource
win10v2004-20231222-en
General
-
Target
3361c903d5b55516c1713ee36f5a9ee8
-
Size
157KB
-
MD5
3361c903d5b55516c1713ee36f5a9ee8
-
SHA1
9db66c3c908c87083abf8d0357a451e3f49b6cfa
-
SHA256
6af3b5472c1c0c49d5743ed24c00b3a48c4f3039bdd67f6e68b0356865aaeeb0
-
SHA512
5a9972253151ead19879a12295add4edfd8cf371f8fd6ea2913d8b9970c945a5aca8c1be44e12ac54e840a4f615a9f07ce79ae68fd080884732587b9a60feb49
-
SSDEEP
3072:WBKNLdL92T8VFKiEbs7gtTvGGPnbSgRe4xuWbL7RMz/x/6bpPgZHoutB8b:m+l9uozGPbzR9xBL7y/xSmoSSb
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3361c903d5b55516c1713ee36f5a9ee8
Files
-
3361c903d5b55516c1713ee36f5a9ee8.exe windows:8 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 172KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 153KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE