Behavioral task
behavioral1
Sample
3b77f8e34e8cdc034776cba93c1c2778.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
3b77f8e34e8cdc034776cba93c1c2778.exe
Resource
win10v2004-20231215-en
General
-
Target
3b77f8e34e8cdc034776cba93c1c2778
-
Size
133KB
-
MD5
3b77f8e34e8cdc034776cba93c1c2778
-
SHA1
da660565d5a0ddbeee3a6353aa2c595a2093ab8f
-
SHA256
12dfdd0963b5503bd28470df6377ba83b02c659594f046f3d08885bcb457d938
-
SHA512
2007f5c1222502e926230c51a86ddf69842949852a065ff362bd237abb54d8c0ae4535af726ba61504c7b24cbc2f79ac736e037085ac21ef8eb404498c6beb43
-
SSDEEP
3072:tywapPcYVN4S4j0rwefrZLuybVsuWDw6t54LQWorQ:toqYx005FLfVWDw6cnorQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b77f8e34e8cdc034776cba93c1c2778
Files
-
3b77f8e34e8cdc034776cba93c1c2778.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE