Behavioral task
behavioral1
Sample
3cf915109b658d823d97d25493b37cab.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3cf915109b658d823d97d25493b37cab.exe
Resource
win10v2004-20231222-en
General
-
Target
3cf915109b658d823d97d25493b37cab
-
Size
62KB
-
MD5
3cf915109b658d823d97d25493b37cab
-
SHA1
22a3399006b3fba91a66df78114eb5314a20af46
-
SHA256
3c676abf08fad6850e99663260a28395db7f40834652ad5dbf80fd027da5291f
-
SHA512
0147ae541e45668fd3fcd9e803d6cfa92511fe2d6d8a8ce3098df660c0df1a1bf7749601576e57a62eecae8eaf4805915cdff1511896305d1cde540767cafc50
-
SSDEEP
1536:myGtWBk0/DUzbRFYO6As0vlhEJ4DzmmPYLMbzezRV:mP0k0/D+Rt6z8nEiDzmmPYYby/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3cf915109b658d823d97d25493b37cab
Files
-
3cf915109b658d823d97d25493b37cab.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 108KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 60KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE