Behavioral task
behavioral1
Sample
3aabf72e476f40ee1405d13d1657bac8.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3aabf72e476f40ee1405d13d1657bac8.exe
Resource
win10v2004-20231215-en
General
-
Target
3aabf72e476f40ee1405d13d1657bac8
-
Size
302KB
-
MD5
3aabf72e476f40ee1405d13d1657bac8
-
SHA1
4b204d7b986d6a05338794c2a3def9953fad956e
-
SHA256
04aab904c5410ee9bba16d620d3b288f9701f849f83eb15035be7bd58720f89d
-
SHA512
cddd5c3b4523263bd6c5e3134197d25c6442455c7c2144169fd1a82659e96a1448ac49be6a5f8397c167cf2bf0fa5555e0074228a81a5eae754a60222c9f4742
-
SSDEEP
6144:n9G2qbyDZWiYLzkL+tI3XJBsW3Lr/VaenObHGyzdi5yTGh0LMmQ:n4NbEZWi4zt25BsWbrrnSxk5yTGh0om
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3aabf72e476f40ee1405d13d1657bac8
Files
-
3aabf72e476f40ee1405d13d1657bac8.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 588KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 195KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE