Behavioral task
behavioral1
Sample
3cc8b47589033aac42d062eb2499cce9.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3cc8b47589033aac42d062eb2499cce9.exe
Resource
win10v2004-20231215-en
General
-
Target
3cc8b47589033aac42d062eb2499cce9
-
Size
5.1MB
-
MD5
3cc8b47589033aac42d062eb2499cce9
-
SHA1
3fe261456e1da79d3531ab730ec3972495300a4c
-
SHA256
3e0b42f81161ed0c28f8e4d519f89b77c3a4dd13b856e00a36c05aefa1a8a7c1
-
SHA512
7aa88fcf57c4a53734e4b0389bc5cce13080fb4fccd856606e8e95d0654e219878254b2981b86e05911dae4cd999c65f2c8527465ca868ffc1d271123c97f262
-
SSDEEP
49152:chm+XlPolMz+66BHJ5+alnhjDkmPz7gI+tHOSLay35bkrfg8FYri+ts5EjdZwaA2:3LBHJj9LJ+xNz30g2yOEjjs9/g3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3cc8b47589033aac42d062eb2499cce9
Files
-
3cc8b47589033aac42d062eb2499cce9.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE