Behavioral task
behavioral1
Sample
03325d3e271a28a2a9c86e0c8e73354b.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
03325d3e271a28a2a9c86e0c8e73354b.exe
Resource
win10v2004-20231215-en
General
-
Target
03325d3e271a28a2a9c86e0c8e73354b
-
Size
295KB
-
MD5
03325d3e271a28a2a9c86e0c8e73354b
-
SHA1
8ba431f5034e74b543995041ccd8b2eee00a6387
-
SHA256
3a87b7d9fa26739d489d481d3f777c328ad345754b990a156b513a759dc14d29
-
SHA512
fb692ee4a9555a14f98499e8e15d0dc27ddff5387ff7d619ae7afc0ce06ccd901c95a77a14a710c58b03c663fd60359482499f1fe8f3f79b98f8fad99924a3ce
-
SSDEEP
6144:ArtETjaBZgCtOROVtQlYyWKaV4Pd0I1jfBynfQeM1X:qBvIwt5yWKPjGfM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03325d3e271a28a2a9c86e0c8e73354b
Files
-
03325d3e271a28a2a9c86e0c8e73354b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 500KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 287KB - Virtual size: 288KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE