Behavioral task
behavioral1
Sample
3a28bd7f05ade06bb76c702627b3eac1.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3a28bd7f05ade06bb76c702627b3eac1.exe
Resource
win10v2004-20231215-en
General
-
Target
3a28bd7f05ade06bb76c702627b3eac1
-
Size
59KB
-
MD5
3a28bd7f05ade06bb76c702627b3eac1
-
SHA1
65b7a467349b2f90b496c4714d0ddc2b720d65c7
-
SHA256
6394afc32890df67543649be8a320bad059f2f2b86816f1a5e4048a9b116eeec
-
SHA512
f4ab5731e234e316e67583de39304477516417cbcc4295e580cca6cfdb644b9e902e1b2bb4ab886fcfc8d21266a47ca8dd60419c94094789c3382b5896d6a3a5
-
SSDEEP
768:XocAX3LKew369lp2z3Sd4baFXLjwP/Tgj93b8NIocVSEFGocAX3LKew369lp2z3Q:SKcR4mjD9r823FHKcR4mjD9r823FJ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a28bd7f05ade06bb76c702627b3eac1
Files
-
3a28bd7f05ade06bb76c702627b3eac1.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE