Behavioral task
behavioral1
Sample
3a8cfb1a7e0441adaef07f9f11e94005.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
3a8cfb1a7e0441adaef07f9f11e94005.exe
Resource
win10v2004-20231215-en
General
-
Target
3a8cfb1a7e0441adaef07f9f11e94005
-
Size
457KB
-
MD5
3a8cfb1a7e0441adaef07f9f11e94005
-
SHA1
a11421315439b35bea61d8fa11bd6cf49852a4f0
-
SHA256
e341f70f3c168eedec5226072b660853996daed0a615fb88a2cd7a5ba0465e35
-
SHA512
96c084848987d1da71794d3761ebb2bd1bb8e5ccc603623e4246d5a8c30bcd856c25037266b39b1497ed7316c1569843cf8a3d3f9337d3c6f5f4928bc5094a1f
-
SSDEEP
12288:s1Mvd1XrbgZ9GTGBizTA1euvKcgDN1ed8e3EVg8gxoSP:1bgZ9HinLcgDfedEab
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a8cfb1a7e0441adaef07f9f11e94005
Files
-
3a8cfb1a7e0441adaef07f9f11e94005.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 348KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 385KB - Virtual size: 388KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 70KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE