Behavioral task
behavioral1
Sample
3574bde078b4658e37510c2627827182.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
3574bde078b4658e37510c2627827182.exe
Resource
win10v2004-20240319-en
General
-
Target
3574bde078b4658e37510c2627827182
-
Size
1.8MB
-
MD5
3574bde078b4658e37510c2627827182
-
SHA1
0e1d333c9d667643085e3abb94588a2d645513da
-
SHA256
e959d96e8d1a7691031a21fec3ec46039cf8111eb572718b8ab7f8361b3230c0
-
SHA512
68d01d6c9dd25c7bb4418e429827af2e3b73b7e0934dd80e83cb1fc50c91c5d3ed69af2cb48e3b7baa10f2d2c136aa008b3d210252b8c96ab47f6b7fe7da140a
-
SSDEEP
24576:JBwfW1t1cORfklL/t4UanBxidxL1XZj3TnLzxfeFKw7BLtYcP3QcsxjsxpQohDiT:Pj1t1cOAt3anAlLN2/LSKQcsxfI31g
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3574bde078b4658e37510c2627827182
Files
-
3574bde078b4658e37510c2627827182.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_BIND
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.btnj Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.s Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.t Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xq Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE