Behavioral task
behavioral1
Sample
3c7d9390cd9ef61438825aa3e8cf540e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3c7d9390cd9ef61438825aa3e8cf540e.exe
Resource
win10v2004-20231215-en
General
-
Target
3c7d9390cd9ef61438825aa3e8cf540e
-
Size
2.0MB
-
MD5
3c7d9390cd9ef61438825aa3e8cf540e
-
SHA1
f20f917dd0ae2dc281799085da4c2d419d8decfe
-
SHA256
5ccf4cf43ea51db9c6bf6bc2a453b8599ee572dbd981473519b3d47dcc8d7276
-
SHA512
72e771902a684ae675699bce984d9031b7a93637022f27f544fdb400165eb3fc982221b6d1a8aa231916b2b2ee4d64baff2c741e57b0d1175ff39d79e564f513
-
SSDEEP
49152:Is8RFd9s1edpGQ7ai7D3xTgOxYwpKsJ3JrO8OMRBdGQ7ai7D3xTgOxYwpK:IvRFd9s1edpD2i7D3xkOxYwpKshJC8Or
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3c7d9390cd9ef61438825aa3e8cf540e
Files
-
3c7d9390cd9ef61438825aa3e8cf540e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE