Behavioral task
behavioral1
Sample
3b57b59d54af201572002098e3ec2a5e.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
3b57b59d54af201572002098e3ec2a5e.exe
Resource
win10v2004-20231222-en
General
-
Target
3b57b59d54af201572002098e3ec2a5e
-
Size
1.2MB
-
MD5
3b57b59d54af201572002098e3ec2a5e
-
SHA1
bf3fd86cee5ac5e5268d376ec30fedc542d5e05c
-
SHA256
ce2e1c5f6ccb65f47b22792ded3e379f0bf0442b44c1dab1fd5687e96f11bcf5
-
SHA512
bf0113d42dbb4639e05f30494030956014da7dd68e5aab7f761f47c3fdd7df0cc6595f24e8897f2e335a2b620d019d74a9f8e9c7b5554760284bfa55c583ced8
-
SSDEEP
24576:/2xZalv+71ZS5aA53tP5AT8Ve1KdOfUTkap5l+:/2xZiD5R53B+TrY6ikaZ+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b57b59d54af201572002098e3ec2a5e
Files
-
3b57b59d54af201572002098e3ec2a5e.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE