Behavioral task
behavioral1
Sample
3a4c6a7c174691b747b22abeebe6be21.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3a4c6a7c174691b747b22abeebe6be21.exe
Resource
win10v2004-20231215-en
General
-
Target
3a4c6a7c174691b747b22abeebe6be21
-
Size
26KB
-
MD5
3a4c6a7c174691b747b22abeebe6be21
-
SHA1
416ce6a7a2d5d84199eff439dc4c83e7f67bbfa0
-
SHA256
7e8fe05586b74995acbf4456cab75cb51cdab53e6cc567f5db5f88a88a6ddd72
-
SHA512
d2945edfc2f330aa48a549e5dfa1d6737874a9f976c54ae1da2430324bee570bc20227df086c5ac5a150bd3a073b6372374465e17f379fa4904f234dbacf666e
-
SSDEEP
768:m/U71z02mfeXxsmlNqhCPBlDWQenbcuyD7UKf:1V02P9NqhKbD9enouy8Kf
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a4c6a7c174691b747b22abeebe6be21
Files
-
3a4c6a7c174691b747b22abeebe6be21.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 284KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE