Behavioral task
behavioral1
Sample
3cf2935a35ee3dfa3405cfbab5160bf1.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3cf2935a35ee3dfa3405cfbab5160bf1.exe
Resource
win10v2004-20231215-en
General
-
Target
3cf2935a35ee3dfa3405cfbab5160bf1
-
Size
2.9MB
-
MD5
3cf2935a35ee3dfa3405cfbab5160bf1
-
SHA1
a4b005e4f0c12074b8e363ec7174b626e9c63c63
-
SHA256
7d18927bcef52cda21777c8a346159ceee3c7e1e423b83c1824bccfeed535301
-
SHA512
2079d40f16dc1ab8a8db32f862fd1ce6dd31b2dbb2088426ac1e3bac510332cd013a086de441805b06946ab47e26c2cdbe14fa3be75f378308aeeb3684f18d39
-
SSDEEP
49152:7AGrHo5AEF8rGvz9rS1IVUz8zAXKP4M338dB2IBlGuuDVUsdxxjeQZwxPYRKs:7zIVu42NXKgg3gnl/IVUs1jePs
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3cf2935a35ee3dfa3405cfbab5160bf1
Files
-
3cf2935a35ee3dfa3405cfbab5160bf1.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE