Behavioral task
behavioral1
Sample
3987e8f20f34835d0773c1628345b080N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3987e8f20f34835d0773c1628345b080N.exe
Resource
win10v2004-20240709-en
General
-
Target
3987e8f20f34835d0773c1628345b080N.exe
-
Size
7.9MB
-
MD5
3987e8f20f34835d0773c1628345b080
-
SHA1
0a260a75d1e40e10288c41a219dc89fa46dffe0f
-
SHA256
c749140c1d10de4f46df19b30db2da0fb1cc088583960068982f69b4a0997765
-
SHA512
ad84e23a32a92d62ebcc30b730177abff2f37933a75df3ee192f7c0a98dacb7a204a47e15974e3eb1db7cd4c134096da89494fd95e5f2e8fba4b47b356f49a33
-
SSDEEP
196608:yCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCv99999999999999999999999999999L:299999999999999999999999999999L
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3987e8f20f34835d0773c1628345b080N.exe
Files
-
3987e8f20f34835d0773c1628345b080N.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 80KB - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 65KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE