Static task
static1
Behavioral task
behavioral1
Sample
f3c6c22a2b7ff5ca1a65143006faa7f58b7b274e4fc8d0fd320ebd0142d0b4f7.exe
Resource
win7-20240508-en
General
-
Target
f3c6c22a2b7ff5ca1a65143006faa7f58b7b274e4fc8d0fd320ebd0142d0b4f7
-
Size
233KB
-
MD5
b634186fb7ead4fa7359a1f86ad2d631
-
SHA1
108c5c6db0b344acefb0af732dd260653c8f6329
-
SHA256
f3c6c22a2b7ff5ca1a65143006faa7f58b7b274e4fc8d0fd320ebd0142d0b4f7
-
SHA512
b32dbfc1f8ca0c95c205f5bb4436b55a01cafbb074fce4667b2e812579e8f1cc5f63b0fc766b280c78bc7e0ecc816c1e3fdf6e65532958d8cc5d23dca9901a4c
-
SSDEEP
3072:ymb3NkkiQ3mdBjFo7LAIRUohTF/SjSrbzLAuBjfwFOmoFzMvUpGqC5n+t:n3C9BRo/AIuuFSjA8uBjwI7FjpjC5+t
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f3c6c22a2b7ff5ca1a65143006faa7f58b7b274e4fc8d0fd320ebd0142d0b4f7
Files
-
f3c6c22a2b7ff5ca1a65143006faa7f58b7b274e4fc8d0fd320ebd0142d0b4f7.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 47KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
petite Size: 274B - Virtual size: 274B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ