Behavioral task
behavioral1
Sample
3a65981e5d2d56553a0620cafa311ccb.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
3a65981e5d2d56553a0620cafa311ccb.exe
Resource
win10v2004-20231215-en
General
-
Target
3a65981e5d2d56553a0620cafa311ccb
-
Size
10.6MB
-
MD5
3a65981e5d2d56553a0620cafa311ccb
-
SHA1
2083290fd7e2c6e00ada9e1e86c19b45c2691c72
-
SHA256
2ac6b19fee80d92f6bafa89af0220342de1178fe1c7e2e75c6060eb6ee8e58e1
-
SHA512
802ab605be50b360d3352b945939c0aa60f8e689aaf150e0b6d87ef87396a551c22eeb83dc566f03f5d6a95258656258999ba105b044cfed9173aac57dbfad8e
-
SSDEEP
196608:M2rHVUq0q69IKvluR3rU0bsSfDUq0q69IKvluR3n7IyeWm7SC5G1Uq0q69IKvlu7:M2N69PvlkbU0bs069Pvlk37Iyet5S69k
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a65981e5d2d56553a0620cafa311ccb
Files
-
3a65981e5d2d56553a0620cafa311ccb.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 141KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE