Behavioral task
behavioral1
Sample
3a4ab2ce8f9a3ae0d1021bae335c0a1d99a80d9327846c45320345daee82d54b.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
3a4ab2ce8f9a3ae0d1021bae335c0a1d99a80d9327846c45320345daee82d54b.exe
Resource
win10v2004-20231215-en
General
-
Target
3a4ab2ce8f9a3ae0d1021bae335c0a1d99a80d9327846c45320345daee82d54b
-
Size
1.5MB
-
MD5
8d257231185a9385dc84e7d777c874fa
-
SHA1
b175f99486cfa5aac66d8ebe19b55f995b023024
-
SHA256
3a4ab2ce8f9a3ae0d1021bae335c0a1d99a80d9327846c45320345daee82d54b
-
SHA512
4a2e20bb9f55a0827ece318130ef1f7fdf5e21aba7b9dd64d9d001e1d83d2962bb23eaeb7468524d866cbd84c6a37d2c3e36966f88128fd7cc1d04fe324d7fac
-
SSDEEP
49152:gSnqINy2I6yUSg3jeHOHs+G80ZlZtpCD2A98tToJ:TnqQy2I6VRfG80ZlTpm2A9a
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a4ab2ce8f9a3ae0d1021bae335c0a1d99a80d9327846c45320345daee82d54b
Files
-
3a4ab2ce8f9a3ae0d1021bae335c0a1d99a80d9327846c45320345daee82d54b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 566KB - Virtual size: 568KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.�yz Size: 974KB - Virtual size: 974KB
IMAGE_SCN_MEM_EXECUTE