Behavioral task
behavioral1
Sample
3ff1b96f5a033cc8a5e73bdb23eb1622.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3ff1b96f5a033cc8a5e73bdb23eb1622.exe
Resource
win10v2004-20231215-en
General
-
Target
3ff1b96f5a033cc8a5e73bdb23eb1622
-
Size
133KB
-
MD5
3ff1b96f5a033cc8a5e73bdb23eb1622
-
SHA1
8447ce9159cd508459387c173cddf9505149bd3f
-
SHA256
bce855e6b08e77b79d3816fb9c19f11894c74cfc101903c36d614e492e082124
-
SHA512
b4856a435a8dc60eb36bbe35c4ab9138b09b97f709c37e00999446c24bbe6960cbb6af53cf989936e0fda74e8b30dc3867ad57b6b3194c9e5abf6ab18e3fde7f
-
SSDEEP
3072:5pyi1osb8HKNAqNgnO76o8Q3BCEkbtCa64pdaa3M4Q:vsTqNvIO7N7pK57M4Q
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ff1b96f5a033cc8a5e73bdb23eb1622
Files
-
3ff1b96f5a033cc8a5e73bdb23eb1622.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE