Behavioral task
behavioral1
Sample
3736d48a2725cf7676dee62c4cb8f535.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3736d48a2725cf7676dee62c4cb8f535.exe
Resource
win10v2004-20231215-en
General
-
Target
3736d48a2725cf7676dee62c4cb8f535
-
Size
377KB
-
MD5
3736d48a2725cf7676dee62c4cb8f535
-
SHA1
c7be36cf2c8722c4cef8d236343ca4a2a7c1f6f5
-
SHA256
d78a97a278f4802120a3844e46831de43bce12f26dfb448a3869b8f6c3768063
-
SHA512
a44e0123bcaec0f3c5b5feea2ac702111302da011eb6e66d851172a78d9ba799da8c298ed22ea723661f11feb498bcf30bf2be5739c1e742a7b8677bc8a48b15
-
SSDEEP
6144:7Y+j2zhwpUl25nK2dvHorsfoQbqt9qjZC/IAQrJ64KY5/IlV+8zoXRu+XI3oS:DnZJvIrAnbqt+ZC+nKY5/8PzkQ+XI3oS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3736d48a2725cf7676dee62c4cb8f535
Files
-
3736d48a2725cf7676dee62c4cb8f535.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 88KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 325KB - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 51KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE