Behavioral task
behavioral1
Sample
3f64545ae4648c9d1a483fde0d83ed10N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3f64545ae4648c9d1a483fde0d83ed10N.exe
Resource
win10v2004-20240709-en
General
-
Target
3f64545ae4648c9d1a483fde0d83ed10N.exe
-
Size
2.0MB
-
MD5
3f64545ae4648c9d1a483fde0d83ed10
-
SHA1
4c6c6a1fbc70762dc246bf43ee72e390fa692cd0
-
SHA256
280e1db46a7f13cda662f87a081cdfc6ff6f647fa6b1694e43f64bdbcc0676b1
-
SHA512
3a4f931d7074a4dfab6999ed9d96ceeb4a1b2081d1c013417a75b000adfb511659437eabdfb10630c3c7154f1229d39444bf9cdb9d0737dbf59ff2e91eb9e472
-
SSDEEP
49152:N3FKJBsW82KWk+kEshxfDf9ICCoSle1PeAZ:N3CBsWEEaHZpCoUAB
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3f64545ae4648c9d1a483fde0d83ed10N.exe
Files
-
3f64545ae4648c9d1a483fde0d83ed10N.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bvxzt Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.yno Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vzkj Size: 512B - Virtual size: 4KB
.lygia Size: 512B - Virtual size: 4KB
.o Size: 512B - Virtual size: 4KB