Behavioral task
behavioral1
Sample
3b5b35baaa63a2ff05d438e2b278116f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3b5b35baaa63a2ff05d438e2b278116f.exe
Resource
win10v2004-20231215-en
General
-
Target
3b5b35baaa63a2ff05d438e2b278116f
-
Size
29KB
-
MD5
3b5b35baaa63a2ff05d438e2b278116f
-
SHA1
da907912ec854e5c32a010a8990d442580e95fe1
-
SHA256
411a4a2f847e1ed081b7c9a8d897942c70b85b5ee2752924c0a6427936b0f822
-
SHA512
2110c77c3730bd2987419b77f3120fabdec7af68fc5619dcb743a036bd4e1f15c8cf18ea972fbc6ac8ff3c77539d9359cc0e63c8967097a5a0ca14424597b600
-
SSDEEP
768:NDlqiHKOAWFSTjkN8r1tUY5Wh9Na+qaJH9UC4Hm:V4iq2F0jkNA1ipbF
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b5b35baaa63a2ff05d438e2b278116f
Files
-
3b5b35baaa63a2ff05d438e2b278116f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 44KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX2 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ