Behavioral task
behavioral1
Sample
3ff0a3433471643182a7d1f5d4f4cdc7.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3ff0a3433471643182a7d1f5d4f4cdc7.exe
Resource
win10v2004-20231215-en
General
-
Target
3ff0a3433471643182a7d1f5d4f4cdc7
-
Size
252KB
-
MD5
3ff0a3433471643182a7d1f5d4f4cdc7
-
SHA1
f23e7c343b8d6f70e6bbefc87e935ae49c32c3b2
-
SHA256
4ebcda745f66c16d1d27f0ea3d8316c0e31b4aa97f37917022146a4b7e0efa7e
-
SHA512
3941d3f1aee5104424ec8bd62a4b0b953245431446ff256db8551c55a298db61c5bd5f31081b0a7e3255130ffa8470f699f5f4544a9c86a3c4637a0634408d37
-
SSDEEP
6144:KpVY8z+yVsxlOh59kXF5YcKI/PQhMPVzTuNLRkQesD6sucUQWoSg:Kr1+6t9EfVFQhOVTuLxea66GoSg
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ff0a3433471643182a7d1f5d4f4cdc7
Files
-
3ff0a3433471643182a7d1f5d4f4cdc7.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 19.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 250KB - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE