Behavioral task
behavioral1
Sample
3bcffd340822c16fbe72904905e93959dafc82997fde3bfddc593547dbbc0081.exe
Resource
win7-20240221-en
General
-
Target
3bcffd340822c16fbe72904905e93959dafc82997fde3bfddc593547dbbc0081
-
Size
461KB
-
MD5
2f7d6f3cdb0ca5d69146f70c8ad7db19
-
SHA1
8feecb1cd8d24c91e6bf1194f5f4ed422c4fa2c4
-
SHA256
3bcffd340822c16fbe72904905e93959dafc82997fde3bfddc593547dbbc0081
-
SHA512
2273a21ab00e2e55ad2ca6fc85af7bd51e77360b4591be99505e1e7c7b2f7af3900d9cfa647acac7aae4d78b4e9ed2ac7adcd5fa264e191588c281367ae04c7c
-
SSDEEP
12288:64wFHoSJ1zBR/p2r8Cnkhdar2oGNLty6SDXaXIKJcnsjs0STADuO1ve5yqhz:MtBR/Mr8Cnkhdar2oGNLty6SDXaXIKJu
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3bcffd340822c16fbe72904905e93959dafc82997fde3bfddc593547dbbc0081
Files
-
3bcffd340822c16fbe72904905e93959dafc82997fde3bfddc593547dbbc0081.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ