Behavioral task
behavioral1
Sample
3ca3dbffe92b6d752cbd5d4f4b133ebc.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3ca3dbffe92b6d752cbd5d4f4b133ebc.exe
Resource
win10v2004-20231215-en
General
-
Target
3ca3dbffe92b6d752cbd5d4f4b133ebc
-
Size
145KB
-
MD5
3ca3dbffe92b6d752cbd5d4f4b133ebc
-
SHA1
ff6f4ac4ea4b2dda02b6382016073cda0538c3b7
-
SHA256
b54f7d6a10a7cbc7532210f9a062f61f25aa53c7bd2347561477666f8a776415
-
SHA512
38ff41815486103e8b4bef0769890e11a02b0a8f4eacbccca81ab1b41ba2d5a22a3c6c9b6b3e451ecb922c97a65b972cd35cf0c3e687cbbc02627a72754c538c
-
SSDEEP
3072:SKcWmjRrz3ZKcWmjRrz36L8Y2wa58b7XK7sA5G1ClHnPBTiJZ:hGyG6gZR58Szg1kHZuP
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ca3dbffe92b6d752cbd5d4f4b133ebc
Files
-
3ca3dbffe92b6d752cbd5d4f4b133ebc.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE