Behavioral task
behavioral1
Sample
3cf6b7f65226edd810e44d0395f9159e822ff80898c34b99a402f98adcfcafcf.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3cf6b7f65226edd810e44d0395f9159e822ff80898c34b99a402f98adcfcafcf.exe
General
-
Target
3cf6b7f65226edd810e44d0395f9159e822ff80898c34b99a402f98adcfcafcf
-
Size
6.5MB
-
MD5
781f2c5082cad73f502e649f5bd030a4
-
SHA1
86ac402801e09be9df598ec080a28b0e88aebb24
-
SHA256
3cf6b7f65226edd810e44d0395f9159e822ff80898c34b99a402f98adcfcafcf
-
SHA512
284b31faae262dc249b62aacc9369cde0877b25c263aab52477f0a6ce8e1b7f783a2fabfc63d021a8720e29cc18dbb7cd21f0001cb7c9ed6aa7a01cec3e8a441
-
SSDEEP
196608:k666666666666666666666666666666666BccccccccccccccccccccccccccccA:k666666666666666666666666666666N
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3cf6b7f65226edd810e44d0395f9159e822ff80898c34b99a402f98adcfcafcf
Files
-
3cf6b7f65226edd810e44d0395f9159e822ff80898c34b99a402f98adcfcafcf.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 80KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 65KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE