Behavioral task
behavioral1
Sample
3c6ea16335957f4b8ae31d22cea2fea1.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3c6ea16335957f4b8ae31d22cea2fea1.exe
Resource
win10v2004-20231215-en
General
-
Target
3c6ea16335957f4b8ae31d22cea2fea1
-
Size
99KB
-
MD5
3c6ea16335957f4b8ae31d22cea2fea1
-
SHA1
fc2957b7fa64db599b89cb7340416aac0bf6a8a7
-
SHA256
ab1946cfb5d7c96d5ea47ba6f23f94b56611c044297808495b5f155297acba40
-
SHA512
8835a2b4d3e0397218ca699d2284216a6d1270151d133181c8fd44e3179337723b092af851bf97eb77b6d2ea0ab54290bbd5d0052fff583366dddb13dd9c7362
-
SSDEEP
3072:sr3KcWmjRrzS82Vc6mDuX33sBP1tpM++jStj:/M2VcxL7+c
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3c6ea16335957f4b8ae31d22cea2fea1
Files
-
3c6ea16335957f4b8ae31d22cea2fea1.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE