Behavioral task
behavioral1
Sample
c3b74b6369fbe2eab8841eb5fa01c881.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
c3b74b6369fbe2eab8841eb5fa01c881.exe
Resource
win10v2004-20240226-en
General
-
Target
c3b74b6369fbe2eab8841eb5fa01c881
-
Size
302KB
-
MD5
c3b74b6369fbe2eab8841eb5fa01c881
-
SHA1
5608db6334d043d7c502893d2ab38ebf6512ea90
-
SHA256
0d1b3f1294a62e0ed95eeca6bd33ebaad0a8118e94c3156ae75b863f2f5cf5d1
-
SHA512
178b29935f719e95fb8ffab007ebf5595d973777aba894b60663b046e28e118e36def9a9e09bbc939da66a687aa1f17d28f5c83b2ae11034e7ba8f243e31eca3
-
SSDEEP
6144:Hd2v0PGZVuazdID/LtrhnXDMMEe49R3GQzplMmQ:M3ua5y/nzMzRqm
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c3b74b6369fbe2eab8841eb5fa01c881
Files
-
c3b74b6369fbe2eab8841eb5fa01c881.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 588KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 195KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE