Behavioral task
behavioral1
Sample
3c148ac849b05be16cf9852093d4d97f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3c148ac849b05be16cf9852093d4d97f.exe
Resource
win10v2004-20231215-en
General
-
Target
3c148ac849b05be16cf9852093d4d97f
-
Size
144KB
-
MD5
3c148ac849b05be16cf9852093d4d97f
-
SHA1
9ecdb4ee9e680de3e9ea99081416bebd9f61ff66
-
SHA256
5cadb8ed0d37f05236b782ea4e16ebb1b2a686375843c26ca434fb45ad19d792
-
SHA512
883be40f15b912fa7ad4bcc7ddc548d8dad1ef0565debc61f6fe915a8882141a310b6cd71ceeca67f96ca0b6d58cb28525fe9825fd1a145d305717132f091fd1
-
SSDEEP
3072:veHcmPLSNENDmzETSFtbQJLSVIQFcuSMVLqD/18SlYzNQO:pkeENDvTSn2SV/GuhYdViCO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3c148ac849b05be16cf9852093d4d97f
Files
-
3c148ac849b05be16cf9852093d4d97f.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 304KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 229KB - Virtual size: 232KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE