Behavioral task
behavioral1
Sample
39d36d337a4d1f25ad78df16d184dad3.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
39d36d337a4d1f25ad78df16d184dad3.exe
Resource
win10v2004-20240226-en
General
-
Target
39d36d337a4d1f25ad78df16d184dad3
-
Size
157KB
-
MD5
39d36d337a4d1f25ad78df16d184dad3
-
SHA1
5078ffa8fbcfbe0899ca3814558a8631217c56ba
-
SHA256
b18a8169f7ac670a0a4a74447c16d1752f3829631c7dd869a098abe85323b252
-
SHA512
3790636332dbe461e6f9ae8a93f20c34a1d52ab13c2475a842670c6989e015c2faa30a51aa64783db17bc59eeec9d62025ca6691db1296d27b489ea55e0c8682
-
SSDEEP
3072:OJfuq8IzyLHIDYsp8iJ+AAkRc5gJTjFzmgLZ3HL:Ouq1yyfpenk/Jt7
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 39d36d337a4d1f25ad78df16d184dad3
Files
-
39d36d337a4d1f25ad78df16d184dad3.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 53KB - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE