Behavioral task
behavioral1
Sample
3a73af76ad9ccd48832044e3cbe78949.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3a73af76ad9ccd48832044e3cbe78949.exe
Resource
win10v2004-20231222-en
General
-
Target
3a73af76ad9ccd48832044e3cbe78949
-
Size
5.8MB
-
MD5
3a73af76ad9ccd48832044e3cbe78949
-
SHA1
47956437947586db8dc656ac1f1c4b1036ba04ee
-
SHA256
ab26fd7dc57e9e9e348aae88d789ce32a86e59ef42cd1bdc8cb1d9bab0325869
-
SHA512
43d7fa0f6ab8a43c96419e31aa134e72aa7b47917c971f2872d6fe6ad726f3d64d8fa9071feb566598d7e475c6a3f81610b202378d17b60c455426936f795e90
-
SSDEEP
98304:f+Oekq4PezGQZaXhP5a9UEI+eG9jAkbkR79D+cVItGQZaXhP5a9UEI+eG:f3q4PqGhRaaCkN9qHGhRa
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a73af76ad9ccd48832044e3cbe78949
Files
-
3a73af76ad9ccd48832044e3cbe78949.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE