Behavioral task
behavioral1
Sample
3901daad556af1568d53547caafb0999.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
3901daad556af1568d53547caafb0999.exe
Resource
win10v2004-20231215-en
General
-
Target
3901daad556af1568d53547caafb0999
-
Size
1.3MB
-
MD5
3901daad556af1568d53547caafb0999
-
SHA1
725f72acbc2e6696b4d4f51b4e414e9590329466
-
SHA256
d4fda46337caa9abf85ce82f07977560e011b5052a3b5e224434c785b528e7ad
-
SHA512
f5a2551ab3d5577f992b17fc2ff4a8046169c44ecd382258be8e27af92b1d06000805c74056da3268dc0658c487b3100773613ff29bfa1f85dd4cbd314ac3705
-
SSDEEP
24576:sSLs2AjsXqOOx7mYRxn9Vy+ADMNAEz/O6RpKtklxzk9a6vhe/ZVfpfFJKHt3:sf2Ajs6OOi+n9RAsX7OspKtklGzc3xtc
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3901daad556af1568d53547caafb0999
Files
-
3901daad556af1568d53547caafb0999.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tn Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.f Size: 512B - Virtual size: 4KB