Behavioral task
behavioral1
Sample
3d4c37933aff71e190fec104a44f5bf3.exe
Resource
win7-20231215-en
General
-
Target
3d4c37933aff71e190fec104a44f5bf3
-
Size
2.9MB
-
MD5
3d4c37933aff71e190fec104a44f5bf3
-
SHA1
622183320baf964931f5bc1df6b94601cd79c44f
-
SHA256
10a7e7c31db874f3938063955a985f0c1e02b6fe568b8774e89b56a2c0c949eb
-
SHA512
e6202df38b758fd5de4a74069801fd9d5e881840597137e7b6630e44f96766b9ca8a515c21d597e49ae5ca9891b4d9577869a186c7b4da97bcca4bd9c7893bfd
-
SSDEEP
49152:JRPA2RJhG8ahw/VkFkVF8+BYKP4M338dB2IBlGuuDVUsdxxjeQZwxPYRKs:3PAkV0xFkVW+BYKgg3gnl/IVUs1jePs
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3d4c37933aff71e190fec104a44f5bf3
Files
-
3d4c37933aff71e190fec104a44f5bf3.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE