Behavioral task
behavioral1
Sample
3b10213005ed3fd295baba53dae03ddab4a7d7650f30a47609da4b2f810a7196.exe
Resource
win7-20240705-en
General
-
Target
3b10213005ed3fd295baba53dae03ddab4a7d7650f30a47609da4b2f810a7196
-
Size
104KB
-
MD5
360c09c767f73372ff7352a5b606beec
-
SHA1
8240fcb5f9869e8280e451a174160afd3cf719ff
-
SHA256
3b10213005ed3fd295baba53dae03ddab4a7d7650f30a47609da4b2f810a7196
-
SHA512
cc087e27a122c003aad7592c66670e89fe4598d727ae537890e8098678627ff31c0970c1c744fa6a1fe6b32bb6cfc3a4ea6807bd7c623e478a0539e28ee6e83b
-
SSDEEP
3072:xhOmTsF93UYfwC6GIoutqiJ8mqtbfUVei6DmpX:xcm4FmowdHoSPubDmpX
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b10213005ed3fd295baba53dae03ddab4a7d7650f30a47609da4b2f810a7196
Files
-
3b10213005ed3fd295baba53dae03ddab4a7d7650f30a47609da4b2f810a7196.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE