Behavioral task
behavioral1
Sample
3ee5d47f47fdfb0b57a9c6b92cff14bf.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
3ee5d47f47fdfb0b57a9c6b92cff14bf.exe
Resource
win10v2004-20231222-en
General
-
Target
3ee5d47f47fdfb0b57a9c6b92cff14bf
-
Size
2.9MB
-
MD5
3ee5d47f47fdfb0b57a9c6b92cff14bf
-
SHA1
30453b07449e6573877bb1910ca3086f5b4c2dde
-
SHA256
8709129227db3f821daf63ad03da8b11dd8086707d4c16c034c4899ea87edcb9
-
SHA512
5affbbb0f0b9a898a2e6f43e6364b5363dac7520536444b4e60ebb19035b23ad0f1db79d31e66cb227eb55431a1d0990e05f2ae152536e9d47eac41ad3ca1a1a
-
SSDEEP
49152:RXKJ3v4kPN+ekphcU4BWVVw4TUzN74NH5HUyNRcUsCVOzetdZJ:lKJAkP4nJnw44z4HBUCczzM3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ee5d47f47fdfb0b57a9c6b92cff14bf
Files
-
3ee5d47f47fdfb0b57a9c6b92cff14bf.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE