Behavioral task
behavioral1
Sample
3bd3faa8f90a32559184b0b37a1d1c95.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3bd3faa8f90a32559184b0b37a1d1c95.exe
Resource
win10v2004-20231215-en
General
-
Target
3bd3faa8f90a32559184b0b37a1d1c95
-
Size
2.6MB
-
MD5
3bd3faa8f90a32559184b0b37a1d1c95
-
SHA1
55ab42f208d345cf035b1d3f61ce6035318fb851
-
SHA256
df519af703cdaa3e6d3e0899f79b0c4ce009d82f28da0da98ddbd2dbb5f027b7
-
SHA512
21008e6a965de4e4360d14978028b3be5cb18f36f2d72ac8bd67f7d42eccc421e3ea040b7ed35da87df59ad78ad8fc9e7962f7a719bfafe3f8aab2730f00f041
-
SSDEEP
49152:ndymU5raNx0ECz64Y+VQyYYn4iD/fESIJc4PUSAWHyay3:fU5rWxwU/2X4Rxa3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3bd3faa8f90a32559184b0b37a1d1c95
Files
-
3bd3faa8f90a32559184b0b37a1d1c95.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE