Behavioral task
behavioral1
Sample
3dbf9a2a42d64e9410be927e615ca67b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3dbf9a2a42d64e9410be927e615ca67b.exe
Resource
win10v2004-20231215-en
General
-
Target
3dbf9a2a42d64e9410be927e615ca67b
-
Size
52KB
-
MD5
3dbf9a2a42d64e9410be927e615ca67b
-
SHA1
3cc7afa44dd289a1b9357c9fef34ca4f132ce496
-
SHA256
9a05dbe51be8a486acf92598ad34eb4988c93cd81174b051f1ab3c2c2b8f07a4
-
SHA512
fe423cc15a521ae8861be5f695f03f2229580dc36f589136c28ed53ae4c92b28bd2b9f04a92e7f536b0c4faa00a2593377e1bc87eeaf00e84b259232f01d94c3
-
SSDEEP
768:4O+0/Wb/FKlbgHR8JIj9DqFb3qJTjDkM1L2g5Z5mPE9Ij0H4jSeFv:RWTFKlbo8JQZqFb3qtQCXH4Dt
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3dbf9a2a42d64e9410be927e615ca67b
Files
-
3dbf9a2a42d64e9410be927e615ca67b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mini9 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE