Behavioral task
behavioral1
Sample
3be123c3544423ea5faca078ea272fb6.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3be123c3544423ea5faca078ea272fb6.exe
Resource
win10v2004-20231215-en
General
-
Target
3be123c3544423ea5faca078ea272fb6
-
Size
1.3MB
-
MD5
3be123c3544423ea5faca078ea272fb6
-
SHA1
0b2252106e1fe2f6eb6bff118346d5fd1c32a327
-
SHA256
66edd8eb09fbb80fc4dc4d57dde23482ea39bb0236da43e3595b6c383f776a9f
-
SHA512
3073b58fedc7098b5d83d6756e49b68230d39669497a6c80f742c22281bdacb2aeaad5f837e49c97d68e3cce9b80241321f70e85f6cc53dff39b0b3a37210a69
-
SSDEEP
24576:k3r33k0OR9Lny6Exs1jMc4B0ClfX32mW8GAGwJ3d+vG:k3rkjyjOZT4llfXAL2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3be123c3544423ea5faca078ea272fb6
Files
-
3be123c3544423ea5faca078ea272fb6.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE