Behavioral task
behavioral1
Sample
3d6fb5bb0ef00df1849e29e77f5e8980N.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3d6fb5bb0ef00df1849e29e77f5e8980N.exe
Resource
win10v2004-20240709-en
General
-
Target
3d6fb5bb0ef00df1849e29e77f5e8980N.exe
-
Size
1.9MB
-
MD5
3d6fb5bb0ef00df1849e29e77f5e8980
-
SHA1
420187d08c914b136c4edb75149b582acab5ad48
-
SHA256
eddebe530e1ec17764e162454f9e3b1b5817e85220671b40c168c078c69b7b41
-
SHA512
d23d49bcfba64e081e8a369b987d0ed86a14d29725673cc75fc2cd16373ba220d16103aa461105111d8cc1e7885a5d17c2083bac1675cb34b80bb3e016181cc7
-
SSDEEP
49152:b1Kdw8vM989kgUXzuT7pboaDq6EFWiDum:b1KzeFXzuBboaoWiDum
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3d6fb5bb0ef00df1849e29e77f5e8980N.exe
Files
-
3d6fb5bb0ef00df1849e29e77f5e8980N.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bvxzt Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.yno Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vzkj Size: 512B - Virtual size: 4KB
.kemyz Size: 512B - Virtual size: 4KB