Behavioral task
behavioral1
Sample
3d0e42d0cfabd86ddfa0ec8d1282d4a3.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3d0e42d0cfabd86ddfa0ec8d1282d4a3.exe
Resource
win10v2004-20231215-en
General
-
Target
3d0e42d0cfabd86ddfa0ec8d1282d4a3
-
Size
85KB
-
MD5
3d0e42d0cfabd86ddfa0ec8d1282d4a3
-
SHA1
91b7ce9f6c9d8954fdd398ca95d234a4477370f4
-
SHA256
809e6f7373d053733f1c04e0f597cc0e1c834606322f20094a4640c92d84f224
-
SHA512
1972488e7bdb2d39476db64ffe9c84e77a19cf2df10deeaf7933d10082b0f6080151b9b4f9631554dc9fa2187e8511e44a52d30876c4f3194bc7618c2227ddb9
-
SSDEEP
1536:SKcR4mjD9r823F9ObPMT/AKdLpTXxDuU7fCF95zjBD+TJE8opGJr4xfk:SKcWmjRrz3KMToKDxF7fq95zjBD+TJEi
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3d0e42d0cfabd86ddfa0ec8d1282d4a3
Files
-
3d0e42d0cfabd86ddfa0ec8d1282d4a3.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE