Behavioral task
behavioral1
Sample
3d379ba6cb13fe26332c4c96529159fb.exe
Resource
win7-20231215-en
General
-
Target
3d379ba6cb13fe26332c4c96529159fb
-
Size
784KB
-
MD5
3d379ba6cb13fe26332c4c96529159fb
-
SHA1
d217b43dcc099ee213de125408d0390916ec192e
-
SHA256
62077bf5d1551474e1d4fae5ea24db874a367bd4811d76b5f78f15bfe2767bee
-
SHA512
7770bfac800540d52b38121521ad74e3196cd0c816ffc16f09641ae7b6e31ff3e68096827fc30129cd097134450d023acc5c48610d216063fa15405b74227c8a
-
SSDEEP
24576:4k3ZSQ6X9aWPtruu8rVp1cON8wgzgd9W8OJBqc:4k3ZZ6X0WPtX815N/gz89W8OJB
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3d379ba6cb13fe26332c4c96529159fb
Files
-
3d379ba6cb13fe26332c4c96529159fb.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE