Behavioral task
behavioral1
Sample
3ef0e14e34a0f109213740214137fd0b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3ef0e14e34a0f109213740214137fd0b.exe
Resource
win10v2004-20231215-en
General
-
Target
3ef0e14e34a0f109213740214137fd0b
-
Size
78KB
-
MD5
3ef0e14e34a0f109213740214137fd0b
-
SHA1
44739a029bfd95fe361f6702eaba5117134ff851
-
SHA256
e0be7c8d5394fe39b3411ef084d8ddca19fb9a2a76368845566bf63ed701c44d
-
SHA512
d798ab8a4f49b86621e135176c03494bff791fc4183a530c87c84bd651e0a5d22051054a75275ba883cb0af5d1925229e35e935b671f1b5b1e134421b4db7ba3
-
SSDEEP
1536:xui7dRjkiRPTdWU0CS2XQKkzF0Eu4w35biwxcwl8DFkZBW5cA7vV0pY:xui7dRjkSTdWU0hCQlzFpGikqCZBlCVJ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ef0e14e34a0f109213740214137fd0b
Files
-
3ef0e14e34a0f109213740214137fd0b.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 264KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 188KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE