Behavioral task
behavioral1
Sample
3e9cd60e57f9d0345f14b588f8a9ff5f.exe
Resource
win7-20231215-en
General
-
Target
3e9cd60e57f9d0345f14b588f8a9ff5f
-
Size
784KB
-
MD5
3e9cd60e57f9d0345f14b588f8a9ff5f
-
SHA1
ce1908c70a3ccd8c7d35b276c9da31a1488e4564
-
SHA256
dfe1edd6580dedf15673d7f08b67aa9794f9fe94a907eecc0fcbc946b5951b39
-
SHA512
5586e7ad143c7d1f85e095286bfb8cd3e42d10657ddc741dd601e4464e7ee4fdb77f8f3aef36fbc79783e6635d93116ee8a0530b696a21ef2272e114010c5075
-
SSDEEP
24576:w7xSNlm14HWqXeddzClPX9W2YfMJbnSZuO9aVLHqb:wEgW2qXeddq9SkScO9aZHqb
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e9cd60e57f9d0345f14b588f8a9ff5f
Files
-
3e9cd60e57f9d0345f14b588f8a9ff5f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE