Behavioral task
behavioral1
Sample
3f7b200e63ccc8bbe422f2a9da8063769328371994f559dc67d01ca7914f3a48.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
3f7b200e63ccc8bbe422f2a9da8063769328371994f559dc67d01ca7914f3a48.exe
Resource
win10v2004-20240226-en
General
-
Target
3f7b200e63ccc8bbe422f2a9da8063769328371994f559dc67d01ca7914f3a48
-
Size
290KB
-
MD5
c5698f237bc02a1e0cb7e2e8d5a55621
-
SHA1
502fa4b8a5f7b20d8af38db3b8c5ce60f08c37f6
-
SHA256
3f7b200e63ccc8bbe422f2a9da8063769328371994f559dc67d01ca7914f3a48
-
SHA512
268fb21180b1044f3685a433c0a498b89628a489e790b2a6de609c1e21955cc1f114c9332f790715363f6b6d1f1d3088ca362b1a5239062a8bc3873cd418f167
-
SSDEEP
6144:h60VDS0PorDh6wtW4ski688Agg2T9M8nHvXr48AoS:weu08XtWM88Agg2T9RP0joS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3f7b200e63ccc8bbe422f2a9da8063769328371994f559dc67d01ca7914f3a48
Files
-
3f7b200e63ccc8bbe422f2a9da8063769328371994f559dc67d01ca7914f3a48.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 680KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 271KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE