Behavioral task
behavioral1
Sample
3fc1d310cf4b474a8eaa7cecb2e6ef9b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3fc1d310cf4b474a8eaa7cecb2e6ef9b.exe
Resource
win10v2004-20231215-en
General
-
Target
3fc1d310cf4b474a8eaa7cecb2e6ef9b
-
Size
527KB
-
MD5
3fc1d310cf4b474a8eaa7cecb2e6ef9b
-
SHA1
6e385382cbcf7bb5245ea14c7d7cf38aa55fe097
-
SHA256
dc15a6202ab6dfde980ea45fe491b06bd8f1dc680321ca0ba4f4b758955d13cc
-
SHA512
0b827328590a89488b1daeeca8431e092532836c9dbe9e744e25769fbe0b984291aad92218016b6806228f2879b945f0675a14b48265721728427820ac7b2d3f
-
SSDEEP
12288:+ZUuLe5/JtvB1Y3DVlTHk1d8uzjvVLGmm8a:+ZDLe5hpByHumufvVqb8a
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3fc1d310cf4b474a8eaa7cecb2e6ef9b
Files
-
3fc1d310cf4b474a8eaa7cecb2e6ef9b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 505KB - Virtual size: 508KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE