Behavioral task
behavioral1
Sample
3f1515c5ffe9cbf9f483ac47ea05c194.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
3f1515c5ffe9cbf9f483ac47ea05c194.exe
Resource
win10v2004-20231215-en
General
-
Target
3f1515c5ffe9cbf9f483ac47ea05c194
-
Size
137KB
-
MD5
3f1515c5ffe9cbf9f483ac47ea05c194
-
SHA1
3f21bd17a6c52d04a9885530ff0cbe0c2771e717
-
SHA256
97ed60d5abd8f29a24807332258b5e9937f1054470e89f50d040a182b24a3869
-
SHA512
e33f281638558826def6b4b5a539313c467ba8762da15ddbdc12b44fe70eecf15e4aafa362f0031bbf1375af444c5526642d3570d4bdf8d0695e9c667792f25d
-
SSDEEP
3072:qRjbBf0BsoUTlsPF7i9OGB6wZ+EgfHjDCF6NruPujo:qR90BwlsPF7i9xB6wZkHnCFmZ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3f1515c5ffe9cbf9f483ac47ea05c194
Files
-
3f1515c5ffe9cbf9f483ac47ea05c194.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 63KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE