Behavioral task
behavioral1
Sample
3b8fe6c21488576d97262ae3aa6d55e4.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3b8fe6c21488576d97262ae3aa6d55e4.exe
Resource
win10v2004-20231215-en
General
-
Target
3b8fe6c21488576d97262ae3aa6d55e4
-
Size
44KB
-
MD5
3b8fe6c21488576d97262ae3aa6d55e4
-
SHA1
e1779919f9452aec9c78475dccfb60c4a1ff45a6
-
SHA256
c96842cd282bbea60f2f62b3b6ba3599e643752a1fc9d91a2f13680c16e88339
-
SHA512
5c0e141a1126fa770e9960768242832731f0270531994f5c41c4e23e14e24e63008e74b6dcaf29fd1f236b0151b9d897a9b34f17496b5154054c111bf7f7a5a7
-
SSDEEP
768:XocAX3LKew369lp2z3Sd4baFXLjwP/Tgj93b8NIocVSEFpTr9jdB9d9Ne4j2kHHi:SKcR4mjD9r823FpHHdLe4di
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b8fe6c21488576d97262ae3aa6d55e4
Files
-
3b8fe6c21488576d97262ae3aa6d55e4.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE