Behavioral task
behavioral1
Sample
3af6b5e414073bc1f287f12aed18e420df91d072aa3123d049fad3f97d206af4.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
3af6b5e414073bc1f287f12aed18e420df91d072aa3123d049fad3f97d206af4.exe
Resource
win10v2004-20240508-en
General
-
Target
3af6b5e414073bc1f287f12aed18e420df91d072aa3123d049fad3f97d206af4.exe
-
Size
78KB
-
MD5
d10c9d91bee208583bbc4baf57ab37e0
-
SHA1
ca9bdd870cc581c4ff93eef33fb72c7b2f07f0ac
-
SHA256
3af6b5e414073bc1f287f12aed18e420df91d072aa3123d049fad3f97d206af4
-
SHA512
83f6d425f9f59f38baa981cf3e3c7333371464267216461b9f9f04c6bd2058fbd3292d146fcedb9e109d9877a21b7e24e262252d96ca10c84552485032cc0aa1
-
SSDEEP
1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8Oyt:fnyiQSonyt
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3af6b5e414073bc1f287f12aed18e420df91d072aa3123d049fad3f97d206af4.exe
Files
-
3af6b5e414073bc1f287f12aed18e420df91d072aa3123d049fad3f97d206af4.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE