Behavioral task
behavioral1
Sample
c3f8ee93e5f6f2a742e4ec7f948aeff0N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c3f8ee93e5f6f2a742e4ec7f948aeff0N.exe
Resource
win10v2004-20240709-en
General
-
Target
c3f8ee93e5f6f2a742e4ec7f948aeff0N.exe
-
Size
536KB
-
MD5
c3f8ee93e5f6f2a742e4ec7f948aeff0
-
SHA1
06ebe42ee05ac3d59381a0394a52cf17dcd3bbb6
-
SHA256
690c1212e54adb9201d8fca309cbdf60fd76d0dea79b5f12c8e0d29d04171992
-
SHA512
285a3a23d2199a3ce8971ab3b3ca500028ecb65a1e07673f23bb6a5582a5e99dbdba3da600a14480a05d96ff9524c8653674192a68bab72e821a57c83c38cf6a
-
SSDEEP
12288:sPKLXqt4k6CVmVBU4kb6Cb3V2ul1ph7gJdBy5CQsxFAK:sSL04kFWy40lljhcJO5srAK
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c3f8ee93e5f6f2a742e4ec7f948aeff0N.exe
Files
-
c3f8ee93e5f6f2a742e4ec7f948aeff0N.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tn Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.f Size: 512B - Virtual size: 4KB