Behavioral task
behavioral1
Sample
3bc0ce9043fa4d9552e29c092bdb8011.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3bc0ce9043fa4d9552e29c092bdb8011.exe
Resource
win10v2004-20231222-en
General
-
Target
3bc0ce9043fa4d9552e29c092bdb8011
-
Size
2.0MB
-
MD5
3bc0ce9043fa4d9552e29c092bdb8011
-
SHA1
2f56359eabd614dc1349a395f3b52d98f5e30a40
-
SHA256
5cda0ba4e165af92a9fce789ed233f63888fefdc2d65d360c9944e86b5447405
-
SHA512
e387df48c22b3a7a8a8d97c4b4c098214740f07a7db637a1178f449aff6b1664358d1f8c14e5e0bcba03d57db0bc7df2648e9d528828160f921308e8894603b2
-
SSDEEP
49152:B6Mqlp5O+xseCncakLz0ibq6yqh6bh+j9SGLeZwMEcf3I3LePMjtcakLz0ibq6yK:B6MWpk+xseCncakcibiqh6bh+j9SGaq8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3bc0ce9043fa4d9552e29c092bdb8011
Files
-
3bc0ce9043fa4d9552e29c092bdb8011.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE