Behavioral task
behavioral1
Sample
03281cf0d6d3a9fc7e08e186a4e8b9b3.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
03281cf0d6d3a9fc7e08e186a4e8b9b3.exe
Resource
win10v2004-20231215-en
General
-
Target
03281cf0d6d3a9fc7e08e186a4e8b9b3
-
Size
1.6MB
-
MD5
03281cf0d6d3a9fc7e08e186a4e8b9b3
-
SHA1
5455c5d2df1b25cc335e4e49e42a1854b7d08a76
-
SHA256
66ea11fdc6ef8d7ab5a7e4e5ab485fd732f935090e973d180fee9f7e8361cd1f
-
SHA512
67ddfcfffacd2ba5cfcbf23555e62083b9335ebf9347e2df478e74924793c59475bfd8d4b67857cc6ba595226006307ea94424c68c6a00688e672a6ddc4f3db5
-
SSDEEP
49152:zmQZ/CmiiTZdM4oC232Lb9j2QCIBtmK1Z6AE0Aw:lzPae6hA5EV
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03281cf0d6d3a9fc7e08e186a4e8b9b3
Files
-
03281cf0d6d3a9fc7e08e186a4e8b9b3.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 4.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.5MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE