Behavioral task
behavioral1
Sample
3d58a9330dd1e4e4efaddba4469a868c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3d58a9330dd1e4e4efaddba4469a868c.exe
Resource
win10v2004-20231215-en
General
-
Target
3d58a9330dd1e4e4efaddba4469a868c
-
Size
32KB
-
MD5
3d58a9330dd1e4e4efaddba4469a868c
-
SHA1
59a05f9be9119015b289eb8c3c240c3b4417dd64
-
SHA256
b13dfb557f63c4ae90ab0feccf25cf98beed3650d817c9720a8e4857c767fafd
-
SHA512
09a0f738145e48cef644cf05c6dfd8bcf3137099e2923851e521e49a0827415cb5256f38c13eb240f22b546543c0f33ec01317ef8b5a646dfba0aef39c4573d0
-
SSDEEP
768:gMGMQJjTuo3WRwcbtHprXFIL7jEBJ1QrHZu59nbcuyD7U:gMNQJjTTSwi5XF47j2J1su9nouy8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3d58a9330dd1e4e4efaddba4469a868c
Files
-
3d58a9330dd1e4e4efaddba4469a868c.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 84KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE