Behavioral task
behavioral1
Sample
3e39e028aaf3d08cc1ab56e3b9eb55f2.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3e39e028aaf3d08cc1ab56e3b9eb55f2.exe
Resource
win10v2004-20231215-en
General
-
Target
3e39e028aaf3d08cc1ab56e3b9eb55f2
-
Size
133KB
-
MD5
3e39e028aaf3d08cc1ab56e3b9eb55f2
-
SHA1
09b0c0a97bd937f6b441bfd89b9997d51d45d153
-
SHA256
5694be4cb2090b9e8b648c9f80697ffca2193c2c227ebfe786a6b6f745e391c1
-
SHA512
eb13c7d17b9f6c6aa3c86cdcf89038fec8022226e9c1f8073b8fd512e1d4442c23a8ad4bfcd5dd61af1654ff693cf719e855e97d6d017a139453056417b43274
-
SSDEEP
3072:vzjUlfPuDRSHKlGrSwxtrKSV9zx1ffU6iiwDRQS+RVQ:vz2KyrBzKUriiwFk7Q
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e39e028aaf3d08cc1ab56e3b9eb55f2
Files
-
3e39e028aaf3d08cc1ab56e3b9eb55f2.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE