Behavioral task
behavioral1
Sample
3cabbbbb53d76aa08ba98c45ece3ef3b5c49798a2deb0a423c018529b1be37ac.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
3cabbbbb53d76aa08ba98c45ece3ef3b5c49798a2deb0a423c018529b1be37ac.exe
Resource
win10v2004-20240508-en
General
-
Target
3cabbbbb53d76aa08ba98c45ece3ef3b5c49798a2deb0a423c018529b1be37ac
-
Size
375KB
-
MD5
9ed177978cece831fc78fd5fb1e9a8b8
-
SHA1
9b7654a6e7e2fe4bf2ec499bdb6cc5a1136aaf85
-
SHA256
3cabbbbb53d76aa08ba98c45ece3ef3b5c49798a2deb0a423c018529b1be37ac
-
SHA512
155351be8f39476b6cc9ba25e914224cae2842f7ed6dc4eba6094a5817f9f6753b98b9d5945913e3b3a4aec5f74264250b360a549c0cd54242a2e8262da6ef70
-
SSDEEP
1536:9ikjd+frbFyyRMoOyXfeKWyydvUyQyy+yyhYJenMr6dDQLlyly9I1I7cyMJyyMJ9:Y4my9pb/8uuxOKcoutVUV
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3cabbbbb53d76aa08ba98c45ece3ef3b5c49798a2deb0a423c018529b1be37ac
Files
-
3cabbbbb53d76aa08ba98c45ece3ef3b5c49798a2deb0a423c018529b1be37ac.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 972KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 368KB - Virtual size: 368KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ssas23 Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE