Behavioral task
behavioral1
Sample
3ca3a016a3f32c50278871dd97975e68.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3ca3a016a3f32c50278871dd97975e68.exe
Resource
win10v2004-20231222-en
General
-
Target
3ca3a016a3f32c50278871dd97975e68
-
Size
201KB
-
MD5
3ca3a016a3f32c50278871dd97975e68
-
SHA1
12a34b12e0782a6cf8398cfffe64ddba61dcc459
-
SHA256
ad995e2afdb45581819c40725038ff2480443c35a0011bb6a292bdfd8295ea7b
-
SHA512
482a0c20b751016e9b4cbc71b9f98798b4b121b155fadf22413c8975786ad8e939cda84d5ab5d92ff936541623c2268170d72e5859442167f60ca03608ac4577
-
SSDEEP
3072:BGLxW0QIGM2hZNqK6NrWBEB7Ez5atQ/P7Q+ove24b0QH7:0ooGpcKuBy5/MvaQQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ca3a016a3f32c50278871dd97975e68
Files
-
3ca3a016a3f32c50278871dd97975e68.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 120KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE