Behavioral task
behavioral1
Sample
c3b0e3443a20063383d07589a89f96ea.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c3b0e3443a20063383d07589a89f96ea.exe
Resource
win10v2004-20240226-en
General
-
Target
c3b0e3443a20063383d07589a89f96ea
-
Size
2.6MB
-
MD5
c3b0e3443a20063383d07589a89f96ea
-
SHA1
c2e2dc4c7e024730edbafb9e165f322410c18658
-
SHA256
dff30f5ff2e9f156d174eaff49ce1d45aaf45e55cc8534d720b25c91b140b723
-
SHA512
ae9ef5a3aa22a5451a477000a3d1b85b98e60a92d117426baeb52bc9101fe6747f2bac7ce1ea535c3eb4a79481580843ab62de5ba72b26a11e797abe80abde37
-
SSDEEP
49152:zL7oEtV2h28xi8ihFBBVkFx6y+XaY6n22Z/ZdXnD+iOqay3:z4Oi28fqBeFx6y2mm43
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c3b0e3443a20063383d07589a89f96ea
Files
-
c3b0e3443a20063383d07589a89f96ea.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE