Behavioral task
behavioral1
Sample
3faa191077bdea4f5bd4051dc6501312.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3faa191077bdea4f5bd4051dc6501312.exe
Resource
win10v2004-20231215-en
General
-
Target
3faa191077bdea4f5bd4051dc6501312
-
Size
37KB
-
MD5
3faa191077bdea4f5bd4051dc6501312
-
SHA1
9b92aeb13ece791c48f81baeda85922baa5e1b84
-
SHA256
3e9abb6ce2436962b0e8e69954d51ae3ef895dea61226b9040fc59d0c7beab41
-
SHA512
4fd35bcac1187636f84509e737bfd9dcf2b94e56cce21e08b643189e3ddcd080bad2532893f2088a1903c279680311518f008116ef30111c52dae47c1ad71c3e
-
SSDEEP
384:w5oR0mBZV96KjRr8QQE5Fo0VbqSPC/APlociZqn6FrLs6/cwFaJCpBJnYq0X4Aok:w5a79o+f/Cyef0SaJCNYq0I9auQZG90
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3faa191077bdea4f5bd4051dc6501312
Files
-
3faa191077bdea4f5bd4051dc6501312.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 296KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE