Behavioral task
behavioral1
Sample
3809fc74d0b7ae2a57e08baec1d846e4.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3809fc74d0b7ae2a57e08baec1d846e4.exe
Resource
win10v2004-20231215-en
General
-
Target
3809fc74d0b7ae2a57e08baec1d846e4
-
Size
353KB
-
MD5
3809fc74d0b7ae2a57e08baec1d846e4
-
SHA1
bf8766c466277d66530ecbc9135726a6df73cd42
-
SHA256
7fe4d4f87967bb33d9c147b3f16ed88def97a1c6da716eda640313a021ca3ba9
-
SHA512
fcad1dbb22966b80dc132534b9c92b175bc187feb86df73933705d638c95380286a6a72d8135478f9a85456a70f916902c7abd46490e22c0f10461e92e07f354
-
SSDEEP
6144:15GATV80nICk2MeqNFQveGyk0QooxeANHePVSKqW6Nn5+YdxfsLPrPwo+:15WKIB27qNmcQo/GStqll5+YTfmE
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3809fc74d0b7ae2a57e08baec1d846e4
Files
-
3809fc74d0b7ae2a57e08baec1d846e4.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 604KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 201KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 152KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE