Behavioral task
behavioral1
Sample
3b6aff7f72664c8244b4257298b8b708.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3b6aff7f72664c8244b4257298b8b708.exe
Resource
win10v2004-20231215-en
General
-
Target
3b6aff7f72664c8244b4257298b8b708
-
Size
133KB
-
MD5
3b6aff7f72664c8244b4257298b8b708
-
SHA1
3958b7526b922f2625e87be32c61d180c7e212f2
-
SHA256
1bebc838f528f792c60bfa5049d4157494ebce8a9b4573c21f97a01c6e4e2955
-
SHA512
612b30879ce1d47913c40f4e5dbf6c6351bd7f0d93fb5733e6fc85f52ce3eb21edf8a9ddab24f18e9c3667383850da1c6691f9a2747975344046ef4db1b76fa6
-
SSDEEP
3072:Mp84Mv7FxlQ/iqVzpUGH80h1oZDMT8jTVN+UcVD43E90jvTxxzOHQ:Mmj3wJbfoZDq8jZoUcGqwxx2Q
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b6aff7f72664c8244b4257298b8b708
Files
-
3b6aff7f72664c8244b4257298b8b708.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE