Behavioral task
behavioral1
Sample
3a25b5baba54af04d15d1d355894f450.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3a25b5baba54af04d15d1d355894f450.exe
Resource
win10v2004-20231222-en
General
-
Target
3a25b5baba54af04d15d1d355894f450
-
Size
2.7MB
-
MD5
3a25b5baba54af04d15d1d355894f450
-
SHA1
54683d05007de1bbde7fc90adab2383fa2a0614f
-
SHA256
94e781aa2a29cdb62ad081f1df61e85037c37ec912bb119af2942185c92daa2d
-
SHA512
a9baa90d6161d6a7924e65f7a26c7acba36f1a2c3709229492d4dcd38667c28d86e43115d6a5b86422a20c1da972ccb70163f27affd368dcd6b1fe0135a002e6
-
SSDEEP
49152:kBvDJSaiRFBljniaQB4ZdvVgwR+kBrl5pLNc0TU2YYownZ10swocuMo2GSKcvcHp:4DsaiRNjnIiva815pLNceU2YY+swoIoT
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a25b5baba54af04d15d1d355894f450
Files
-
3a25b5baba54af04d15d1d355894f450.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE