Behavioral task
behavioral1
Sample
3b84b49e3a58596632caae10e8928b78.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3b84b49e3a58596632caae10e8928b78.exe
Resource
win10v2004-20231215-en
General
-
Target
3b84b49e3a58596632caae10e8928b78
-
Size
125KB
-
MD5
3b84b49e3a58596632caae10e8928b78
-
SHA1
153f4274702f3629093b561a31dbf50e2c146305
-
SHA256
798d616306f56060bc483ffe0ea027006198042a1db0893072f35f1ea207ec75
-
SHA512
057ab1aeb19c60afc1e525c1a398ae2897136467b22b8e40ba7b6590ea848cad7431dbf7f73d8c5b080d0af2fed8c0aa01d8e7f74c772005b8d6d3472a141a60
-
SSDEEP
3072:oKbXNf/162jFvuRwyKhT6PhE2r7yG9yYgIMbZt7out:jt/162h2RwT4JlDgIMbT7oS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b84b49e3a58596632caae10e8928b78
Files
-
3b84b49e3a58596632caae10e8928b78.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 304KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 123KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE