Behavioral task
behavioral1
Sample
c3b3e606509feb13c4ac729cb418cbe6.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c3b3e606509feb13c4ac729cb418cbe6.exe
Resource
win10v2004-20240226-en
General
-
Target
c3b3e606509feb13c4ac729cb418cbe6
-
Size
3.9MB
-
MD5
c3b3e606509feb13c4ac729cb418cbe6
-
SHA1
65d2f50295f99ecd9175b4d693e31aa8743540fe
-
SHA256
09ba5401dca6976ed4bf55cae47b2b2f489829e329ad8a573120f5584a9872cb
-
SHA512
94fe6ddd1dc56783051be880be5b35b2841bb480023492aa18909c92f2fb24da5a0925644fca91a1c9e9122d54058b9a575befb452fa4ef2bb0dbd713456b07d
-
SSDEEP
98304:uu7FXGONOA9zyULG+kgd8pVPH+A9zyULG+/mQy8mYA9zyULG+kgd8pVPH+A9zyU1:j9GizLqEglHPzLq0O8mVzLqEglHPzLq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c3b3e606509feb13c4ac729cb418cbe6
Files
-
c3b3e606509feb13c4ac729cb418cbe6.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE