Behavioral task
behavioral1
Sample
3d8ec1255cd56217229d0827509cb7b9.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3d8ec1255cd56217229d0827509cb7b9.exe
Resource
win10v2004-20231215-en
General
-
Target
3d8ec1255cd56217229d0827509cb7b9
-
Size
821KB
-
MD5
3d8ec1255cd56217229d0827509cb7b9
-
SHA1
f111f25da8bf0d5da6d5dec176291dfd82ae2c33
-
SHA256
5d3cf1d72c5e8d6a9e0f7c688a9a799e07317feb473574d7c5c9366a6490b14d
-
SHA512
b4157ed3e021f8ac832d65b36e26cd16db17827abc02b7433c464fb6062397aa3e1184e3b1f95b35487aff32a527e92179aefb9b41bd800d6533cfa8191202ef
-
SSDEEP
12288:A91qmAEGu0duiliO98Ftw1vNTLaU/T/KjadrHpflO9dJ5IECpxOokLZsCtQw1qEZ:AumAoFiwp6vl3SaXcjukL2CDYO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3d8ec1255cd56217229d0827509cb7b9
Files
-
3d8ec1255cd56217229d0827509cb7b9.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE