Behavioral task
behavioral1
Sample
3d223a7c24f07852d767997bc61b208b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3d223a7c24f07852d767997bc61b208b.exe
Resource
win10v2004-20231215-en
General
-
Target
3d223a7c24f07852d767997bc61b208b
-
Size
2.9MB
-
MD5
3d223a7c24f07852d767997bc61b208b
-
SHA1
744eb5412fc62faa43d4c917b75d9f711b580489
-
SHA256
b1658256ee210674602ea4c6180ccc1ac0fc70a15cf12d91b63f5c2fd9065000
-
SHA512
222fb17987074262cc28a4a39ce24404e9c046a36321a630cb709768c3209033486cd84e6ca2ebdc3fe6d096e5d6119c5f3d215d8d092efce82983277a69ab35
-
SSDEEP
49152:g8g3Bq4eJtCDHEtq15QZ/XuZ7ODN189ON74NH5HUyNRcUsCVOzetdZJ:5gizCPY9wqJek4HBUCczzM3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3d223a7c24f07852d767997bc61b208b
Files
-
3d223a7c24f07852d767997bc61b208b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE