Behavioral task
behavioral1
Sample
3bbc76a33817940df209c67a5ae987a2.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3bbc76a33817940df209c67a5ae987a2.exe
Resource
win10v2004-20231215-en
General
-
Target
3bbc76a33817940df209c67a5ae987a2
-
Size
10.1MB
-
MD5
3bbc76a33817940df209c67a5ae987a2
-
SHA1
5834ad2ede22dda8a18e5d4d6281cab510379773
-
SHA256
9916920dcdd6c2a62f391e92fcbca3f46145e7e8603ac504130ba3ff76bb27f5
-
SHA512
2ee8884238953cba635fe2653d4e03d0c44ba1ad891a1838fd2603e59fbbb0e412a4ab28f1672ef08fe46e40148eae09b11cbd506652b7e1db86eafee95823ab
-
SSDEEP
98304:jjBxcO4EYTjigxC9Y5lpuG8p1PTJxjRXzjfjAyVPKA71TfFQ8l:jjBxcO4jjSQIG8p1LdzjV1Rp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3bbc76a33817940df209c67a5ae987a2
Files
-
3bbc76a33817940df209c67a5ae987a2.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 224KB - Virtual size: 224KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 83KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE