Behavioral task
behavioral1
Sample
3a57edfd7c69cadf682189d0482144f9.exe
Resource
win7-20231215-en
General
-
Target
3a57edfd7c69cadf682189d0482144f9
-
Size
213KB
-
MD5
3a57edfd7c69cadf682189d0482144f9
-
SHA1
ddfefb58b0603253e4ac51683b6a03f83e2e60b7
-
SHA256
9f3454508da58f0bfef44d148856d5c44c393b301f0e9fa633be230ca9d62f71
-
SHA512
c13fda4ec7889f5b250e076a7cf30e3a18e975214b0a960acdaf6f3fcc9c9d415eb14575578926567ce8f6409455ae621085b549d65236d079280cfe3c2a5614
-
SSDEEP
3072:lJacj8v7wQ+ZGx7w8wjjP8I1IU8RjrzzvUWAOZjfKdL4YP:lJPgv7wJZ87wBjYI1IUwrIOZynP
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a57edfd7c69cadf682189d0482144f9
Files
-
3a57edfd7c69cadf682189d0482144f9.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 416KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 184KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.jfkp Size: 512B - Virtual size: 4KB