Behavioral task
behavioral1
Sample
3f2b0101965c7cd8b76ae3bb2208b3c0N.exe
Resource
win7-20240708-en
General
-
Target
3f2b0101965c7cd8b76ae3bb2208b3c0N.exe
-
Size
20KB
-
MD5
3f2b0101965c7cd8b76ae3bb2208b3c0
-
SHA1
efc4e592a3bf0d109a47f4fd816fca19c930b289
-
SHA256
8f83491f5ec205c86ee5c15f1d4ec82e61777d9c6f7dbecdb468d2964e6c82e7
-
SHA512
643550847db3bf6c0e92a8b9508a6f3d1c945f085c7cb20d72e7385fdf4260f74bf5f5b55801eda80207dd94ab7e9443e217a83675db3e2c1d4317aadcf2395e
-
SSDEEP
384:+J5+c5mibCpKAjndr3Vo4G/usaNJawcudoD7UXlOIJqN:uAcYimoqdm9gnbcuyD7U1W
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3f2b0101965c7cd8b76ae3bb2208b3c0N.exe
Files
-
3f2b0101965c7cd8b76ae3bb2208b3c0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE