Behavioral task
behavioral1
Sample
c3989e960e2a0a71d6fb8cc4c12fce4a.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c3989e960e2a0a71d6fb8cc4c12fce4a.exe
Resource
win10v2004-20240226-en
General
-
Target
c3989e960e2a0a71d6fb8cc4c12fce4a
-
Size
605KB
-
MD5
c3989e960e2a0a71d6fb8cc4c12fce4a
-
SHA1
2d4c9073f5309e9cf0837adec1e2f623c48c36bd
-
SHA256
dc4d001c9d451b500d0596065f687cbdccc574e6adaf4a1dbcc6481fb8a1143c
-
SHA512
36245bf7aef3d492a48febfd8fcdec1d4fe16ae9b4babeb152bd281174d36c2326ba7d76ac2dca284ec88361f230fb231c38a8637ebf6ce949c671f0fa1b2dbc
-
SSDEEP
12288:2/I1eHr4TzCOUvmnQdcjdQ5f2uTevYZNIJuKipHm:CBHrOz/DQCjdQ5+uav4NVa
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c3989e960e2a0a71d6fb8cc4c12fce4a
Files
-
c3989e960e2a0a71d6fb8cc4c12fce4a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 588KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 195KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE