Behavioral task
behavioral1
Sample
38bd3391c512a4264696e672712a8db3.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
38bd3391c512a4264696e672712a8db3.exe
Resource
win10v2004-20231215-en
General
-
Target
38bd3391c512a4264696e672712a8db3
-
Size
1.1MB
-
MD5
38bd3391c512a4264696e672712a8db3
-
SHA1
905992392f5c081b42d4e8ee27e2dee7ac04780e
-
SHA256
1ddc341e354ed7c9083c22a4f35a67592117728611787c60973fa7b2b38db3c3
-
SHA512
6a1da8872756632414fd3282735d3dff6a05cf28f5af47e8e2f706f5b9c20ad65899b1fd4d85f7a1bc9bd9b3db4f84d99855ddd3d7abb4696f8e15dc7ecfdbb1
-
SSDEEP
24576:qxjNu0z7ZWIW6Zo4oxXow5s1O8xpFPWfIXgbvVpeRfNE2KY3cC:K5u0PZ7WCuEUenXgbvVwq2d
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 38bd3391c512a4264696e672712a8db3
Files
-
38bd3391c512a4264696e672712a8db3.exe windows:0 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.UPX0 Size: 706KB - Virtual size: 708KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.UPX1 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.UPX2 Size: 430KB - Virtual size: 432KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 756KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ