Behavioral task
behavioral1
Sample
3e87ce4cd523560e31855d839542d42dd2ac884db8980e3e545fbe56dfdc38d8.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
3e87ce4cd523560e31855d839542d42dd2ac884db8980e3e545fbe56dfdc38d8.exe
Resource
win10v2004-20240412-en
General
-
Target
3e87ce4cd523560e31855d839542d42dd2ac884db8980e3e545fbe56dfdc38d8
-
Size
1.1MB
-
MD5
248945cdc7fd4658f3755453076cfe0a
-
SHA1
78d46010d022c7053222f2dcbe77c622828ef2f1
-
SHA256
3e87ce4cd523560e31855d839542d42dd2ac884db8980e3e545fbe56dfdc38d8
-
SHA512
2bd9f46543317e897ce8f7a3c34c79201079cbf2ad92ae903c99e2fac99075f72358d72d23f8f9e62089103d9ee75707ad4562de48cc80328004dc262d72df92
-
SSDEEP
24576:PMHucNdmNd5pJ6rW+940NKWnxWVje3jbgkI+WrS+2h3AU:0HXgNd5mC+9jB9jEkI+dZh
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e87ce4cd523560e31855d839542d42dd2ac884db8980e3e545fbe56dfdc38d8
Files
-
3e87ce4cd523560e31855d839542d42dd2ac884db8980e3e545fbe56dfdc38d8.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE