Behavioral task
behavioral1
Sample
3cdf0d8c0518a6906a8aa7de306c6c35.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3cdf0d8c0518a6906a8aa7de306c6c35.exe
Resource
win10v2004-20231215-en
General
-
Target
3cdf0d8c0518a6906a8aa7de306c6c35
-
Size
5.3MB
-
MD5
3cdf0d8c0518a6906a8aa7de306c6c35
-
SHA1
77fc1b98cb0c0cb82b88d348b6967c594afe7aca
-
SHA256
48330590fbf8098473f9a420c86998d18c19596d70974fa3fc7aea2524ec5d6d
-
SHA512
9a3b43d4a1496617595d6d6d627428c7b4739e2737e1f7c9251fc714eb2330cffd9c8dbd98ac326a927a26dfc53ce9c8f6052f347e90d96e6db6699e5abcd632
-
SSDEEP
98304:DMF2B3pc7iPv32IZ1Q8tfYen916CjSS2MN7d2IZ1Q8tfY:G2B3p3pZdwen94CjSS2cdpZdw
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3cdf0d8c0518a6906a8aa7de306c6c35
Files
-
3cdf0d8c0518a6906a8aa7de306c6c35.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE